# Edit this configuration file to define what should be installed on
# your system.  Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’).
{ config, pkgs, ... }:

{
  imports =
    [ # Include the results of the hardware scan.
      ./hardware-configuration.nix
    ];

  nixpkgs.config = {
    allowUnfree = true;
    packageOverrides = pkgs: {};
  };

  nix = {
     useSandbox = false;
     nrBuildUsers = 50;
     trustedUsers = ["dmj"];
     buildCores = 16;
     buildMachines = [
       { hostName = "localhost";
         system = "x86_64-linux";
	       maxJobs = 16;
       }
     ];
  };

  boot = {
    loader = {
      grub = {
        enable = true;
        version = 2;
        device = "/dev/sda";
      };
    };
  };

  networking = {
    firewall = {
      enable = true;
      allowPing = true;
      allowedTCPPorts = [ 443 80 22 ];
    };
    hostName = "nixos";
  };

  # Select internationalisation properties.
  i18n = {
    consoleFont = "Lat2-Terminus16";
    consoleKeyMap = "us";
    defaultLocale = "en_US.UTF-8";
  };

  # Set your time zone.
  time.timeZone = "America/New_York";

  # List packages installed in system profile. To search by name, run:
  # $ nix-env -qaP | grep wget
  environment.systemPackages = with pkgs; [
     wget gitMinimal emacs coq
  ];

  # Enable the X11 windowing system.
  hardware = {
    opengl.driSupport32Bit = true;
    pulseaudio = {
      enable = true;
      systemWide = false;
    };
  };

  # Enable the OpenSSH daemon.
  services = {
    keybase.enable = true;
    weechat.enable = true;
    xserver.enable = true;
    xserver.videoDrivers = ["nvidia"];
    xserver.desktopManager.gnome3.enable = true;
    xserver.displayManager.gdm.enable = true;

   emacs = {
      defaultEditor = true;
      enable = true;
    };

    nix-serve = {
      enable = false;
      secretKeyFile = "/etc/nix-serve-keys/secret";
    };

    nginx = {
      enable = true;
    };

     openssh = {
       enable = true;
       forwardX11 = true;
     };
     sshd.enable = true;
     postgresql.enable = true;
    };

  security.sudo = {
    enable = true;
    wheelNeedsPassword = false;
  };

  # Define a user account. Don't forget to set a password with ‘passwd’.
  users = {
    defaultUserShell = "/run/current-system/sw/bin/zsh";
    extraUsers.dmj = {
      isNormalUser = true;
      uid = 1000;
      extraGroups = [ "wheel" ];
    };
  };

  # zsh
  programs = {
    zsh.enable = true;
  };

  # version
  system.stateVersion = "18.09";