{ config, pkgs, ... }:

{

#var.var = value; ## (semicolon!) this is an example of correct entry.

imports = [ ./hardware-configuration.nix ];
system.stateVersion = "17.09"; ## systemvar: change only if update process says so.

nix.useSandbox = true;
nix.buildCores = 0; ## means all available
nix.maxJobs = 4;

nixpkgs.config.allowUnfree = true; ## enable to allow firmware and similar closed things in tree.
nixpkgs.config.allowBroken = false; ## enable to allow broken packages, this is not recommended.

nixpkgs.config.firefox.enableAdobeFlash = true;   ## must research into "nixpkgs.config" more!

nixpkgs.config.packageOverrides = pkgs: {
  xterm = pkgs.kdeApplications.konsole;
  unstable = import <nixos-unstable> { config = config.nixpkgs.config; };
};

## xterm entry tries to replace xterm package with konsole package.

## allow pkgs from unstable. prepend them with "unstable." like this:  "unstable.package"
## needs that unstable repository channel is added, with nickname "nixos-unstable"

environment.systemPackages = with pkgs; [
## check into unstables with "nix-env -qaP | grep package"
## -- -- console stuff
bash
bc
binutils
curl
f2fs-tools
file
fuse
gamin
gpm
hdparm
htop
libva-full
## libtxc_dxtn ## not needed, if s3tcSupport is set
links2
manpages
mc
ntfs3g
openssh
pciutils
smartmontools
sudo
udisks2
unrar
unzip
wget
zip
zlib
## -- -- desktop-level services, basically services and service applications.
desktop_file_utils
glxinfo
gst_all_1.gnonlin
gst_all_1.gst-libav
gst_all_1.gst-plugins-bad
gst_all_1.gst-plugins-base
gst_all_1.gst-plugins-good
gst_all_1.gst-plugins-ugly
gst_all_1.gst-vaapi
gst_all_1.gstreamer
icedtea_web
#### hplip   ## not needed, as long as its pulled by printing.drivers
networkmanager
pavucontrol
pamixer
phonon-backend-gstreamer
pulseaudioFull
radeon-profile
## -- -- fonts
fira
fira-code
fira-mono
xfontsel
## -- -- i18n, documentation and similar stuff
kdeApplications.l10n.de.qt4
kdeApplications.l10n.ru.qt4
kdeFrameworks.ki18n
## -- -- desktop stuff, pure desktop applications.
ark
unstable.audacity ## newer version in unstable
colord-kde
unstable.gwenview
inkscape
gimp-with-plugins
gsmartcontrol
libreoffice-fresh
kate
keepassx-community
konversation
krename
leafpad
unstable.obs-studio
unstable.palemoon ## stable palemoon often segfaults.
unstable.smplayer ## newer version in unstable
unstable.smtube   ## newer version in unstable
unstable.unetbootin
unstable.zim
## -- -- games and similar stuff
doomseeker
freeorion
openarena
urbanterror
zandronum
];

programs.bash.enableCompletion = true;
programs.gnupg.agent.enable = true;
programs.gnupg.agent.enableSSHSupport = true;

services.acpid.enable = true;
services.kmscon.hwRender = true;
services.locate.enable = true;
services.nixosManual.showManual = true;
services.ntp.enable = true;
services.openssh.enable = true;
services.printing.enable = true;
services.printing.drivers = with pkgs; [ hplip ];
## services.teamviewer.enable = true; ## because teamviewer package is disabled
services.xserver.enable = true;
services.xserver.desktopManager.xterm.enable = false;
services.xserver.videoDrivers = [ "radeon" ]; # "nvidia-beta" "intel"
services.xserver.layout = "gb,de,ru";
services.xserver.xkbOptions = "eurosign:e,variant:de";  ## = "eurosign:e";
## services.xserver.libinput.enable = false;
services.xserver.displayManager.sddm.enable = true;
services.xserver.desktopManager.plasma5.enable = true;

hardware.bluetooth.enable = true;
hardware.pulseaudio.enable = true;
hardware.pulseaudio.package = pkgs.pulseaudioFull;
hardware.pulseaudio.support32Bit = true;
hardware.opengl.driSupport32Bit = true;
hardware.opengl.s3tcSupport = true;
hardware.opengl.extraPackages = with pkgs; [ vaapiIntel vaapiVdpau libvdpau-va-gl ];
hardware.opengl.extraPackages32 = with pkgs; [ vaapiIntel vaapiVdpau libvdpau-va-gl ];
hardware.sane.enable = true;

boot.loader.grub.device = "/dev/disk/by-id/wwn-0x5000c500af989f69"; ## look up with "ls -l /dev/disk/by-id/" and "lsblk". Make sure that "-part" are not used, those would be partitions.
boot.loader.grub.enable = true;
boot.loader.grub.version = 2;
boot.kernel.sysctl = { "vm.swappiness" = 10; };
boot.cleanTmpDir = true;

## fileSystems."/".device = "SGT1G-ROOT";
## fileSystems."/".device = "/dev/disk/by-id/wwn-0x5000c500af989f69-part2";
##    above not needed, because hardware-configuration autodetects it.
fileSystems."/".options = [ "defaults" "data=journal" "relatime" ];

## fileSystems."/media/data-disk".label = "SGT1G-DATA";   ## mounting by WWN
fileSystems."/media/data-disk".device = "/dev/disk/by-id/wwn-0x5000c500af989f69-part3";
fileSystems."/media/data-disk".options = [ "defaults" "data=journal" "relatime" ];

swapDevices = [ { device = "/dev/disk/by-id/wwn-0x5000c500af989f69-part1"; } ];

networking.dhcpcd.enable = false;
networking.firewall.enable = false;
networking.hostName = "nix01";
networking.networkmanager.enable = true;
## networking.wireless.enable = true;   ## conflicts with networkmanager

environment.variables.EDITOR = pkgs.lib.mkOverride 0 "nano";	## making nano default text editor.

i18n.consoleFont = "Lat2-Terminus16";
i18n.consoleKeyMap = "de"; ## was "us"
i18n.defaultLocale = "ru_RU.UTF-8"; ## "en_US.UTF-8";
time.timeZone = "Europe/Berlin";

users.mutableUsers = true;
users.defaultUserShell = "/var/run/current-system/sw/bin/bash";	  ## setting default shell to bash

users.extraUsers.userp.isNormalUser = true;
users.extraUsers.userp.uid = 1000;
users.extraUsers.userp.initialPassword = "123123";
users.extraUsers.userp.extraGroups = [ "audio" "disk" "video" "wheel" "networkmanager" "systemd-journal" ];

security.pam.services.userp.enableKwallet = true;

}