# /hosts/nixos/configuration.nix
{ config
, pkgs
, inputs
, lib
, ...
}:

{
  imports = [
    ./hardware-configuration.nix
    ../../modules/core/common.nix
    ../../modules/desktop/gui.nix
    (import ../../modules/storage/disko.nix {
      inherit inputs lib config;
      diskoConfigPath = ./disko-config.nix;
    })
    ../../modules/desktop/gnome.nix
    ../../modules/desktop/apps/soundux.nix
    ../../modules/desktop/apps/freeshow.nix
    ../../modules/core/management.nix
    ../../modules/hardware/laptop.nix
    ../../modules/core/dev.nix
  ];

  sops.secrets = {
    "users/petere-password" = {
      neededForUsers = true;
    };
    "users/caitlin-password" = {
      neededForUsers = true;
    };
  };

  services.displayManager.gdm.settings = {
    "greeter" = {
      "Exclude" = "petere";
    };
  };

  home-manager.users.caitlin.imports = [
    ../../home-manager/modules/desktop-user.nix
  ];

  networking.hostName = "caitlin-x1";
  networking.modemmanager.enable = true;

  # Laptop-specific hardware (fingerprint reader, fwupd)
  my.hardware.laptop.enable = true;

  hardware.sensor.iio.enable = true;

  users.users.caitlin = {
    isNormalUser = true;
    extraGroups = [ "wheel" ];
    hashedPasswordFile = config.sops.secrets."users/caitlin-password".path;
    subUidRanges = [
      {
        startUid = 100000;
        count = 65536;
      }
    ];
    subGidRanges = [
      {
        startGid = 100000;
        count = 65536;
      }
    ];
  };

  services.openssh.enable = true;

  my.users.petere = {
    hashedPasswordFile = config.sops.secrets."users/petere-password".path;
    subUidStart = 165536;
    subGidStart = 165536;
  };

  environment.systemPackages = with pkgs; [
    xournalpp
    prismlauncher
    jdk21
    rclone
    steam
  ];

  hardware.graphics.enable = true;
  programs.steam.enable = true;

  # Allow Steam to use 32-bit libraries
  programs.steam.package = pkgs.steam.override {
    extraLibraries = ps: [ ];
  };

  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
}