nixos configuration

# Swap
# - ZFS does not like swap partitions very much. We have made one /just/ in case, but we
#   will mostly use ZRAM for swap instead.
## Swap Partition
swapDevices = [
  {
    device = "dev/disk/by-partuuid/b974352a-22c7-4601-85da-bf6df7feb7d7"; # UUID for /dev/sda3
    randomEncryption.enable = true; # no swap skimming today, buckeroo
  }
];
## ZRAM
zramSwap = {
  enable = true;
  algorithm = "zstd";
};

# System Settings
system.stateVersion = "26.05"; # latest stable as of 2026-08-20
time.timeZone = "America/Chicago"; # eh close enough
console.keyMap = "us";
i18n.defaultLocale = "en_US.UTF-8";
i18n.extraLocaleSettings = {
  LC_ADDRESS = "en_US.UTF-8";
  LC_IDENTIFICATION = "en_US.UTF-8";
  LC_MEASUREMENT = "en_US.UTF-8";
  LC_MONETARY = "en_US.UTF-8";
  LC_NAME = "en_US.UTF-8";
  LC_NUMERIC = "en_US.UTF-8";
  LC_PAPER = "en_US.UTF-8";
  LC_TELEPHONE = "en_US.UTF-8";
  LC_TIME = "en_US.UTF-8";
};

# System Services
services = {
  libinput.enable = true; # libinput is based
  fwupd.enable = true; # LVFS firmware updates
  printing.enable = true; # CUPS!
  flatpak.enable = true; # unfortunately, flatpak is based
  tailscale.enable = true; # unfortunately, tailscale is based

  power-profiles-daemon.enable = true; # performance & power saving profiles
  upower.enable = true; # being able to see battery status


  ## OpenSSH
  ## - basically, allow SSH'ing into this, but REQUIRE use of a key
  openssh = {
    enable = true;
    settings = {
      PasswordAuthentication = false;
      KbdInteractiveAuthentication = false;
      PermitRootLogin = "no";
    };
  };
};

# Graphical Environment
## - awwwwww you know what it isssssss
##   wayland niri wayland niri wayland niri wayland niri
services.xserver = {
  enable = true; # BUT IT SAYS XSE- ssshhhhhhhhh
  ## keyboard language
  xkb = {
    layout = "us";
    variant = "";
  };
  ## silly: just. yeet x11. only wayland.
  excludePackages = [ pkgs.xterm ];
};

## niri
programs.niri.enable = true;

## display manager: greetd (for now)
services.greetd = {
  enable = true;
  settings = {
    default_session = {
      command = "${config.programs.niri.package}/bin/niri-session";
      user = "millicent";
    };
  };
};

## By default, NixOS strips out part of the path given to the niri.service unit.
## That's silly. We're gonna let niri have the whole path because it's a good girl
systemd.user.services.niri.enableDefaultPath = false;

## for defaults sake, we are installing polkit, gnome-keyring, and alacritty.
## we will edit this later, don't worry
security.polkit.enable = true;
services.gnome.gnome-keyring.enable = true;

## TODO add systemPackages [ ... alacritty ... ]

# Sound
services.pulseaudio.enable = false; # FUC U
security.rtkit.enable = true;
services.pipewire = { # YEAAAAA
  enable = true;
  alsa.enable = true; # for maximum compatability
  alsa.support32Bit = true; # "
  pulse.enable = true; # pipewire-pulse it think
  jack.enable = true; # pipewire-jack it think 2
};

 # Packages
 ## enabling unstable
 nixpkgs.config = {
   allowUnfree = true;
   packageOverrides = pkgs: {
     unstable = import <nixos-unstable> {
       config = config.nixpkgs.config;
     };
   };
 };

 ## system packages
 environment.systemPackages = with pkgs; [
   ## the duhs
   zip
   unzip
   wget
   lm_sensors # for additional hw support
   whois
   dig # forget what this is for, think DNS?
   gnupg # unfortunately, GPG is still used sometimes
   wireguard-tools
   reaction # dependency for wireguard-tools
   git
   doas # sudo but better
   ## programming languages
   python314
   python314Packages.pip
   gcc
   gdb
   valgrind
   go
   cargo
   rustc
   ## shell & DE
   unstable.noctalia # chill shell
   kdePackages.dolphin # file manager
   pwvucontrol # for audio management
   ## extras
   kitty # cute terminal with pictures
   chromium # for handshake specifically
   librewolf # LET THE BROWSER. BE TRANS!!!!!
   neovim # vim. but slightly cooler
   vesktop # discord. but slightly cooler
   vscode # boooooooo
   signal-desktop #mom,,,
   mixxx # untzuntzuntzuntzuntz
];

## fonts!
fonts.packages = with pkgs; [
  atkinson-hyperlegible-next # sans
  ioskeley-mono.normal-NF # mono
  drafting-mono # fancy mono
];

## emacs
## - the default emacs given by stable is a fairly outdated version.
## - thus, we are using a community overlay to grab the latest
## - tagged version and make sure it is the pure GTK version for wayland.
services.emacs = {
  enable = true;
  defaultEditor = true;
  package = pkgs.emacs-unstable-pgtk;
};

nixpkgs.overlays = [
  (import (builtins.fetchTarball {
    url = "https://github.com/nix-community/emacs-overlay/archive/master.tar.gz";
  }))
];

## docker (rootless)
virtualisation.docker = {
  # Consider disabling the system wide Docker daemon
  enable = false;

  rootless = {
    enable = true;
    setSocketVariable = true;
    # Optionally customize rootless Docker daemon settings
    daemon.settings = {
      dns = [ "1.1.1.1" "8.8.8.8" ];
      registry-mirrors = [ "https://mirror.gcr.io" ];
    };
  };
};