nix-dotfiles/hosts/tsuki/configuration.nix

{ config, lib, pkgs, ... }:
{
  imports =
    [
      ./hardware-configuration.nix

      ../../pluggables/tools/programming.nix

      ./services/nginx.nix
      # ./services/dokuwiki.nix
      # ./services/gitlab
      ./services/gitea
      ./services/jitsi.nix
      # ./services/openldap.nix
      ./services/plex.nix
      ./services/hydra.nix
      ./services/matrix.nix
      # ./services/libvirt.nix
      ./services/grafana.nix
      # ./services/calibre.nix
      ./services/openvpn.nix
      # ./services/samba.nix
      ./services/searx.nix
      # ./services/syncthing.nix
    ];

  systemd.targets = {
    sleep.enable = false;
    suspend.enable = false;
    hibernate.enable = false;
    hybrid-sleep.enable = false;
  };

  # security.pam.services.login.unixAuth = true;

  boot.loader = {
    grub = {
      enable = true;
      version = 2;
      efiSupport = true;
      fsIdentifier = "label";
      device = "nodev";
      efiInstallAsRemovable = true;
    };
    # efi.efiSysMountPoint = "/boot/efi";
    # efi.canTouchEfiVariables = true;
  };

  networking = {
    hostName = "Tsuki";
    networkmanager.enable = true;
    useDHCP = false;
    interfaces.ens18.useDHCP = true;
    nameservers = [
      "1.1.1.1"
      "8.8.8.8"
    ];
    firewall.enable=true;
  };

  services = {
    openssh = {
      enable = true;
      passwordAuthentication = false;
      challengeResponseAuthentication = false;
      permitRootLogin = "no";
    };
    printing.enable = true;
    cron = {
      enable = true;
      systemCronJobs = [
    #     "*/5 * * * *      root    date >> /tmp/cron.log"
      ];
    };
  };

  users.groups.media = {};

  users.users = {
    h7x4.extraGroups = [
      "wheel"
      "networkmanager"
      "docker"
      "disk"
      "libvirtd"
      "input"
    ];
    media = {
      isSystemUser = true;
      group = "media";
    };
  };

  environment.systemPackages = with pkgs; [
    wget
  ];

  programs = {
    git.enable = true;
    npm.enable = true;
    tmux.enable = true;
    neovim = {
      enable = true;
      defaultEditor = true;
      viAlias = true;
      vimAlias = true;
      configure = {
        packages.myVimPackage = with pkgs.vimPlugins; {
          start = [
            direnv-vim
            vim-nix
            vim-polyglot
          ];

          opt = [
            vim-monokai
          ];
        };

        customRC = ''
          set number relativenumber
          set undofile
          set undodir=~/.cache/vim/undodir 

          packadd! vim-monokai 
          colorscheme monokai
        '';
      };
    };
  };

  virtualisation = {
    docker.enable = true;
    libvirtd.enable = true;
  };
}