nixos-config/hosts/cave/configuration.nix

{
  pkgs,
  lib,
  inputs,
  config,
  ...
}: let
  sshKeys = import ../../crypto/ssh-keys.nix;
in {
  imports = [
    # Defaults
    ./hardware-configuration.nix
    ../../common/base.nix
    ../../common/full-install.nix

    # Localization
    ../../common/locales/en.nix
    ../../common/locales/fr-keymap.nix

    # Hardware
    # ../../common/hardware/tpm2.nix
    ../../common/hardware/wireless.nix
    ../../common/hardware/ssd.nix
    ../../common/hardware/btrfs.nix
    ../../common/components/lanzaboote.nix

    # Software components
    ../../common/components/de/greetd.nix
    ../../common/components/de/sway.nix
    ../../common/components/de/plasma6.nix

    # Programs
    ../../common/programs/steam.nix

    # Services
    # ../../common/services/auditd.nix
    # ../../common/services/nix-gc.nix
    ../../common/services/opensnitch.nix
    # ../../common/services/adguardhome.nix
    ../../common/services/syncthing.nix
    ../../common/services/usbguard.nix
    ../../common/services/autoupgrade.nix

    # Home-manager
    ../../home/tasia/home.nix

    inputs.agenix.nixosModules.default
    ../../common/components/wifi-secrets.nix

    # inputs.thymis.nixosModules.thymis-controller
    # Personal modules
    # ../../modules/nixos/tildefriends.nix
    ./yubikey.nix
    ./rtl-sdr.nix
  ];

  networking = {
    hostName = "cave";

    firewall = {
      allowedTCPPorts = [
        # 8080 # ?
        # 80
        # 443
        # 3001
        # 8000
        # 8008 # ssb
        # 12345 # tildefriends
        # 13378 # audiobookshelf
      ];
      allowedUDPPorts = [
        # 8080 # ?
      ];
    };
  };

  users.users.tasia.openssh.authorizedKeys.keys = [
    sshKeys.tasia.cave
  ];

  virtualisation.docker.enable = true;
  services.flatpak.enable = true;

  services.syncthing = {
    user = "tasia";
    dataDir = lib.mkForce "/home/tasia/Sync/data";
    configDir = lib.mkForce "/home/tasia/Sync/configuration";
  };

  environment.systemPackages = with pkgs; [
    inputs.tildefriends.packages.${system}.default

    osu-lazer-bin
    prismlauncher

    sherlock
    whois
    android-tools

    ripgrep
    lsd
    viu
    logseq
    nix-tree
    # android-studio
    lutris

    # nheko
    iamb
    ladybird
    lynx

    chirp
    yubikey-manager

    signal-desktop

    element-desktop
    # element-web
    fluffychat
    # fluffychat-web
  ];

  nixpkgs.config.permittedInsecurePackages = [
    "electron-27.3.11"
    "fluffychat-linux-1.22.1"
    "fluffychat-web-1.22.1"
    "olm-3.2.16"
  ];
  
  # services.systembus-notify.enable = true;

  services.printing.drivers = [pkgs.cnijfilter2];

  # https://nixos.wiki/wiki/FAQ/When_do_I_update_stateVersion
  system.stateVersion = "23.11";
}