nixos/hosts/desk/default.nix

{ pkgs, inputs, config, lib, ... }:

let
  nfs_opts = [ "x-systemd.automount" "noauto" "x-systemd.idle-timeout=600" ];
  hdd_opts = [ "nosuid" "nodev" "nofail" ];
in

{

  imports =
    [
      ./boot.nix
      ./hardware.nix
      ./kvm.nix
      ./desk_apps.nix
      ../../modules/common/default.nix
      ../../modules/common/system-d_boot.nix
      ../../modules/networking/ssh.nix
      ../../modules/networking/hosts.nix
      ../../modules/user
      ../../modules/apps/99_i3_config.nix
      ../../modules/dev/docker.nix
      ../../modules/dev/ruby.nix
      ../../modules/dev/utils.nix
      ../../modules/misc/polkit.nix
      inputs.home-manager.nixosModules.default
      inputs.sops-nix.nixosModules.sops
    ];


  config = {
    user = "fred";
    host = "desk";
    sops_file = "home.yaml";
    rootless_docker = true;

    time.timeZone = "America/Los_Angeles";
    i18n.defaultLocale = "en_US.UTF-8";

    environment.systemPackages = with pkgs; [ nfs-utils ddcutil input-remapper ];

    #### NFS's ###
    services.autofs = {
      enable = true;
      timeout = 60;
      autoMaster = ''
        /-	/etc/autofs/auto.nfs_server	--timeout=60
      '';
    };
    environment.etc."autofs/auto.nfs_server" = {
      text = ''
        /nfs  	-rw,soft,rsize=8192,wsize=8192	nfs:/nfs
        /solid	-rw,soft,rsize=8192,wsize=8192	nfs:/solid
        /docker	-rw,soft,rsize=8192,wsize=8192	nfs:/docker
      '';
      mode = "0644";
    };

    ### HDD's ###
    environment.etc.crypttab = {
      mode = "0600";
      text = ''
        # <volume-name> <encrypted-device> [key-file] [options]
        8tb UUID=72edb411-1740-43e0-81ba-084374bb2b78 /dev/disk/by-id/usb-Generic_Flash_Disk_CE8AD7705 keyfile-size=4096,nofail
      '';
    };

    fileSystems."/run/media/fred/8tb" =
    { device = "/dev/mapper/8tb";
      fsType = "ext4";
      options = hdd_opts;
    };

    # ddcutil detect # get I2C bus #
    # ddcutil capabilities --bus=7
    # ddcutil --bus=7 setvcp 60 0x0f
    hardware.i2c.enable = true;
    users.users.${config.user} = {
      extraGroups = [ "i2c" ];
    };

    services.tcsd.enable = false; # prevent sysinit-reactiviation.target hang when rebuilding flake
    services.xserver.displayManager.lightdm.extraSeatDefaults = "display-setup-script = ${pkgs.ddcutil}/bin/ddcutil --bus=8 setvcp 60 0x0f";

    networking.firewall.allowedUDPPorts = [ 11357 ]; # ollama-docker
    networking.firewall.allowedTCPPorts = [ 11357 ]; # ollama-docker
    networking.enableIPv6 = false;
    security.pki.certificates = [ (builtins.readFile ../../dotfiles/certs/mfCA.crt) ];

    hardware.bluetooth.enable = true;
    hardware.bluetooth.powerOnBoot = true;
    services.blueman.enable = true;

    system.stateVersion = "25.05";
  };
}