{ config, pkgs, ... }:

{
  imports =
    [ # Include the results of the hardware scan.
      ./hardware-configuration.nix
      <nixpkgs/nixos/modules/profiles/hardened.nix>
    ];

  nix.maxJobs = 4;
  nix.buildCores = 4;

  boot.loader.grub.enable = true;
  boot.loader.grub.version = 2;
  boot.loader.grub.device = "/dev/disk/by-id/usb-JetFlash_TS2GJFV30_NBPAZVDB-0:0";

  boot.kernelPackages = pkgs.linuxPackages_latest;

  boot.kernelPatches = [ {
    name = "schedutil-config";
    patch = null;
    extraConfig = ''
      CPU_FREQ_GOV_SCHEDUTIL y
    '';
  } ];

  boot.kernelParams = [ "scsi_mod.use_blk_mq=y" "dm_mod.use_blk_mq=y" ];

  boot.kernel.sysctl."user.max_user_namespaces" = 31336;

  networking.hostName = "sorh";

  time.timeZone = "Europe/Moscow";

  nixpkgs.config = {
    allowUnfree = true;

    packageOverrides = pkgs: {
      unstable = import <nixos-unstable> {
        config = config.nixpkgs.config;
      };
      xfsdump = pkgs.callPackage ./pkgs/xfsdump {};
    };
  };

  environment.systemPackages = with pkgs; [
    dosfstools
    curl git wget
    fio ncdu sysstat xfsdump progress
    libcgroup
    taskwarrior
    neovim tmux
    rofi polybar lemonbar dunst hsetroot redshift
    zathura
    chromium discord steam
    xsel
  ];

  services.openssh.enable = true;

  services.taskserver.enable = true;

  services.dnscrypt-proxy.enable = true;
  services.dnscrypt-proxy.localAddress = "10.0.0.10";
  services.dnscrypt-proxy.resolverName = "fvz-anytwo";

  services.printing.enable = true;

  services.xserver.enable = true;
  services.xserver.layout = "us,ru";
  services.xserver.xkbOptions = "grp:caps_toggle,grp_led:scroll,compose:ralt";

  # services.xserver.videoDrivers = [ "nvidiaLegacy340" ];

  services.xserver.libinput.enable = true;
  services.xserver.libinput.accelProfile = "flat";

  services.ntopng.enable = true;

  services.irqbalance.enable = true;

  services.xserver.windowManager.bspwm.enable = true;

  networking.firewall.enable = false;

  networking.vswitches.vs0.interfaces = [ "enp6s0" ];

  networking.interfaces.vs0.ipv4.addresses = [ {
    address = "10.0.0.10";
    prefixLength = 24;
  } ];

  networking.defaultGateway.address = "10.0.0.1";

  networking.nameservers = [ "10.0.0.10" "1.1.1.1" "9.9.9.9" ];

  networking.useDHCP = false;

  networking.enableIPv6 = false;

  virtualisation.vswitch.enable = true;

  sound.enable = true;

  users.extraUsers = {
    root.shell = pkgs.mksh;
    user = {
      isNormalUser = true;
      uid = 1000;
      shell = pkgs.mksh;
    };
  };

  powerManagement.cpuFreqGovernor = "schedutil";

  hardware.opengl.driSupport32Bit = true;

  security.lockKernelModules = false;

  system.stateVersion = "18.03";

}