{ lib, config, pkgs, ... }:

with lib;

{
  orbekk.simple-firewall.enable = lib.mkForce false;
  networking.firewall.enable = true;
  orbekk.gaming.enable = true;
  orbekk.desktop.enable = true;
  orbekk.development.enable = true;
  services.printing.enable = true;
  services.printing.drivers = with pkgs; [ gutenprint brlaser ];
  services.openssh.enable = true;

  networking.firewall.allowedTCPPorts = [3979];
  networking.firewall.allowedUDPPorts = [3979];

  services.logind.extraConfig = ''
    HandlePowerKey=suspend
  '';

  # Enable the X11 windowing system.
  services.xserver.enable = true;

  services.xserver.displayManager.sddm.enable = lib.mkForce false;  # Cannot use with jovian

  # Steam setup
  jovian.steam.autoStart = true;
  jovian.steam.desktopSession = "river";
  jovian.steam.enable = true;
  jovian.steam.user = "orbekk";
  jovian.devices.steamdeck.enable = true;

  # Enable sound with pipewire.
  sound.enable = true;
  hardware.pulseaudio.enable = false;
  security.rtkit.enable = true;
  services.pipewire = {
    enable = true;
    alsa.enable = true;
    alsa.support32Bit = true;
    pulse.enable = true;
    # If you want to use JACK applications, uncomment this
    #jack.enable = true;

    # use the example session manager (no others are packaged yet so this is enabled by default,
    # no need to redefine it in your config for now)
    #media-session.enable = true;
  };

  nix.gc.persistent = false;
  networking.networkmanager.enable = true;
  networking.hostName = "dex";
  programs.xwayland.enable = true;
  programs.dconf.enable = true;
  environment.systemPackages = with pkgs; [ river ];
  system.autoUpgrade.enable = mkForce false;

  security.pam.enableFscrypt = true;

  # Use the systemd-boot EFI boot loader.
  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = false;

  boot.initrd.availableKernelModules = [ "nvme" "xhci_pci" "usb_storage" "usbhid" "sd_mod" "sdhci_pci" ];
  boot.initrd.kernelModules = [ ];
  boot.kernelModules = [ "kvm-amd" ];
  boot.extraModulePackages = [ ];

  system.stateVersion = "23.05";

  # hardware-configuration
  fileSystems."/" =
    { device = "/dev/disk/by-uuid/41d480f8-52e9-40d5-bd12-a3aa48ccf1b5";
      fsType = "ext4";
    };

  fileSystems."/boot" =
    { device = "/dev/disk/by-uuid/7DFD-854D";
      fsType = "vfat";
    };

  swapDevices =
    [ { device = "/dev/disk/by-uuid/10757668-8f17-4677-b405-f1d1095a81ac"; }
    ];

  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
  # (the default) this is the recommended approach. When using systemd-networkd it's
  # still possible to use this option, but it's recommended to use it in conjunction
  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
  networking.useDHCP = lib.mkDefault true;
  # networking.interfaces.eth0.useDHCP = lib.mkDefault true;
  # networking.interfaces.wlo1.useDHCP = lib.mkDefault true;

  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
  hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
}