{ config, lib, pkgs, ... }:
{
  imports = [ ./auto-upgrade.nix ];
  programs.zsh.enable = true;
  programs.tmux.enable = true;

  nixpkgs.config.packageOverrides = pkgs: {
    libsignal-protocol-c = pkgs.callPackage ../pkgs/libsignal-c/default.nix { };
    keycloak = pkgs.callPackage ../pkgs/keycloak/default.nix { };
  };

  environment.shellAliases = {
    vim = "nvim";
  };
  environment.systemPackages = with pkgs; [
    dnsutils
    git
    gnupg
    haskellPackages.hledger
    htop
    mosh
    neovim
    # nox  # Broken as of 2017-06-12
    pass
    silver-searcher
    whois
  ];
  time.timeZone = "America/New_York";

  system.stateVersion = "17.04";
  services = {
    postgresql = {
      dataDir = "/var/db/postgresql";
      package = pkgs.postgresql95;
    };
    openssh.passwordAuthentication = false;
  };

  nix = rec {
    useSandbox = lib.mkDefault true;
    maxJobs = lib.mkOverride 110 16;
    buildCores = lib.mkDefault 0;  # auto configure
    gc.automatic = lib.mkDefault true;
    nixPath = lib.mkBefore [
      "nixpkgs-stable=https://nixos.org/channels/nixos-18.03/nixexprs.tar.xz"
      "nixpkgs-unstable=https://nixos.org/channels/nixos-unstable/nixexprs.tar.xz"
      "nixpkgs=/nix/var/nix/profiles/per-user/root/channels/nixos/nixpkgs"
      "nixos-config=/etc/nixos/configuration.nix"
      "/nix/var/nix/profiles/per-user/root/channels"
    ];
    trustedBinaryCaches = [
      "https://cache.nixos.org"
    ];
    binaryCaches = trustedBinaryCaches;
    binaryCachePublicKeys = [ "hydra.orbekk.com-1:aAKJuVqMptWoFfY9fhUADdXw5LM5IfSGjTSobuxg+Bo=" ];
    daemonNiceLevel = 10;
    daemonIONiceLevel = 5;
  };

  boot.cleanTmpDir = true;

  nixpkgs.config.allowUnfree = true;
}