# /hosts/mary-x270/configuration.nix
{ config
, pkgs
, inputs
, lib
, ...
}:

{
  imports = [
    ./hardware-configuration.nix
    ../../modules/core/common.nix
    ../../modules/desktop/gui.nix
    (import ../../modules/storage/disko.nix {
      inherit inputs lib config;
      diskoConfigPath = ./disko-config.nix;
    })
    ../../modules/desktop/gnome.nix
    ../../modules/core/management.nix
    ../../modules/core/dev.nix
  ];

  sops.secrets = {
    "users/petere-password" = {
      neededForUsers = true;
    };
    "users/mary-password" = {
      neededForUsers = true;
    };
    "opencode-api-key" = {
      owner = "petere";
      group = "users";
      mode = "0440";
    };
  };

  home-manager.users.mary.imports = [
    ../../home-manager/modules/desktop-user.nix
  ];

  home-manager.users.petere.imports = [
    ../../home-manager/modules/desktop-user.nix
  ];

  networking.hostName = "mary-x270";

  users.users.mary = {
    isNormalUser = true;
    description = "Mary";
    extraGroups = [
      "wheel"
      "networkmanager"
      "video"
      "audio"
    ];
    hashedPasswordFile = config.sops.secrets."users/mary-password".path;
    subUidRanges = [
      {
        startUid = 200000;
        count = 65536;
      }
    ];
    subGidRanges = [
      {
        startGid = 200000;
        count = 65536;
      }
    ];
  };

  my.users.petere = {
    description = "Peter Edley";
    hashedPasswordFile = config.sops.secrets."users/petere-password".path;
    subUidStart = 165536;
    subGidStart = 165536;
  };

  hardware.graphics.enable = true;

  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
}