nix-dotfiles/profiles/base.nix

{ config, pkgs, lib, ... }:
let
  mkDefault =  lib.mkDefault;
in
{
imports =
    [ 
      ../packages/vim.nix
      ../services/ssh.nix
      ./sops.nix
    ];

  environment.systemPackages = with pkgs; [
      vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default.
      git
      unzip
      zip
      gnutar
      wget
      rsync
      ripgrep
      neofetch
      htop
      bottom
      killall
      foot.terminfo
      tailscale
      sops
      atuin
      upower
      nvtopPackages.full
    ];

  #just allow unfree, im fine with it. 
  nixpkgs.config.allowUnfree = true; 

  zramSwap = mkDefault {
    enable = true;
    memoryPercent = 25;
  };


  # Set your time zone.
  time.timeZone = "Europe/Oslo";

  # Select internationalisation properties.
  i18n.defaultLocale = "en_US.UTF-8";

  # Configure console
  console = mkDefault {
    font = "Lat2-Terminus16";
    keyMap = "no";
  };

  #tailscale
  services.tailscale.enable = true;
  networking.firewall.interfaces."tailscale0" = let
	    all = { from = 0; to = 65535; };
	  in {
	    allowedUDPPortRanges = [ all ];
	    allowedTCPPortRanges = [ all ];
  };


  #system vide bash aliases. TODO: check if only one of these works so i dont need duplicates.
  programs.bash.shellAliases = config.environment.shellAliases;
  environment.shellAliases = {
      gst="git status";
      gcm="git commit -m";  
      gca="git commit --amend";  
      gsw="git switch";
      gaa="git add -A";
      gb="git branch"; 
      dc="cd";
      la="ls -la";
      lls="ls"; 
      battery="upower -i $(upower -e | grep 'BAT') | grep -E 'state|to full|percentage'";
      cim="vim";
      cbuild="mkdir build && cd build && cmake .. && make";
      untar="tar -xvf";
    };


    environment.interactiveShellInit = ''
    #atuin import auto
        
    # Colors
    RESET='\[\e[0m\]'
    BOLD='\[\e[1m\]'
    CYAN='\[\e[36m\]'
    GREEN='\[\e[32m\]'
    BLUE='\[\e[34m\]'
    YELLOW='\[\e[33m\]'
    MAGENTA='\[\e[35m\]'
    RED='\[\e[31m\]'

    if [[ -n "$SSH_CONNECTION" ]]; then
      REMOTE_LABEL="\[''${YELLOW}\] (ssh)\[''${RESET}\]"
    else
      REMOTE_LABEL=""
    fi
    
    # Git branch function
    parse_git_branch() {
        git branch --show-current 2>/dev/null | awk '{print " (" $1 ")"}'
    }
    
    
    # Set prompt
    if [[ $EUID -eq 0 ]]; then
        PS1="''${BOLD}''${RED}\u''${RESET}:''${BOLD}''${RED}\h''${REMOTE_LABEL}''${RESET}:''${BOLD}''${GREEN}\w''${MAGENTA}\$(parse_git_branch) ''${BLUE}\A''${RESET}\$ "
    else
        PS1="''${BOLD}''${CYAN}\u''${RESET}:''${BOLD}''${CYAN}\h''${REMOTE_LABEL}''${RESET}:''${BOLD}''${GREEN}\w''${MAGENTA}\$(parse_git_branch) ''${BLUE}\A''${RESET}\$ "
    fi
  '';


#  environment.interactiveShellInit = ''
#    alias gst='git status'
#    alias gcm='git commit -m'
#    alias gca='git commit --amend'
#    alias gsw='git switch'
#    alias gaa='git add -A'
#    alias gb='git branch'
#    alias dc='cd'
#    alias la='ls -la'
#    alias lls='ls'
#  '';
#
  
  ## some insecure packages
  nixpkgs.config.permittedInsecurePackages = [
    "python3.11-youtube-dl-2021.12.17"
  ];
  

  sops.secrets."github/api" = {  
    mode = "0444";
    group = "root";
  };

  #nix stuff
  nix.gc.automatic = mkDefault true;
  nix = {
    extraOptions = mkDefault ''
	    builders-use-substitutes = true
	    experimental-features = nix-command flakes impure-derivations ca-derivations
      !include ${config.sops.secrets."github/api".path}
    '';
    
  settings = {
    trusted-users = [ "gunalx" "root" ];
    experimental-features = [ "nix-command" "flakes" ];
    substituters = [
        "https://cache.nixos.org/"
        "https://cuda-maintainers.cachix.org"
        "https://nix-community.cachix.org"
        "https://nixos-rocm.cachix.org"
        "https://nixpkgs-unfree.cachix.org"
      ];

    trusted-public-keys = [
        "cuda-maintainers.cachix.org-1:0dq3bujKpuEPMCX6U4WylrUDZ9JyUG0VpVZa7CNfq5E="      
        "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
        "nixos-rocm.cachix.org-1:VEpsf7pRIijjd8csKjFNBGzkBqOmw8H9PRmgAq14LnE="
        "nixpkgs-unfree.cachix.org-1:hqvoInulhbV4nJ9yJOEr+4wxhDV4xq2d1DK7S6Nj6rs="
      ];

  };

  buildMachines = [
      { hostName = "bolle.pbsds.net";
	      system = "x86_64-linux";
	      maxJobs = 6;
	      speedFactor = 12857;
	    }
	    { hostName = "garp.pbsds.net";
	      system = "x86_64-linux";
	      maxJobs = 4;
	      # i7-6700
	      speedFactor = 8088;
      }
      { hostName = "localhost";
	      system = "x86_64-linux";
	      maxJobs = 4;
	      #speedFactor = 8066;
	      speedFactor = 8000;
	      supportedFeatures = [ ];
	      mandatoryFeatures = [ ];
	    }
	    { hostName = "aragon";
	      system = "x86_64-linux";
	      # if the builder supports building for multiple architectures, 
	      # replace the previous line by, e.g.,
	      # systems = ["x86_64-linux" "aarch64-linux"];
	      maxJobs = 6;
	      #speedFactor = 13199;
	      speedFactor = 6000;
	      supportedFeatures = [ ];
	      mandatoryFeatures = [ ];
	    }
	    { hostName = "galadriel";
	      system = "x86_64-linux";
	      maxJobs = 4;
	      #speedFactor = 8066;
	      speedFactor = 4000;
	      supportedFeatures = [ "cuda" ];
	      mandatoryFeatures = [ ];
	    }
	    # {
	    #   hostName = "isvegg.pvv.ntnu.no";
	    #   system = "x86_64-linux";
	    #   maxJobs = 4;
	    #   speedFactor = 4961;
	    #   supportedFeatures = [ "big-parallel" ];
	    #   mandatoryFeatures = [ ];
	    # }
	  ];
    distributedBuilds = true;
  };
    

  system.autoUpgrade = {
    enable = true;
    flake = "git+https://github.com/adrlau/nix-dotfiles.git";
    flags = [
      "--no-write-lock-file"
      "-L"
    ];
  };
  
}