(use-modules
 (gnu)
 (gnu image)
 (gnu system nss)
 (guix channels)
 (nongnu packages firmware)
 (nongnu packages linux)
 (nongnu system linux-initrd))

(use-service-modules
 admin
 authentication
 base
 configuration
 dbus
 desktop
 linux
 networking
 nix
 pm
 sddm
 sound
 virtualization
 xorg)

(use-package-modules
 bootloaders
 certs
 freedesktop
 fonts
 gl
 gnome
 kde-frameworks
 linux
 pciutils
 qt
 readline
 terminals
 version-control
 virtualization
 wm
 xdisorg
 xorg)

(operating-system
 (host-name "ziltis-machine")
 (timezone "Europe/Berlin")
 (locale "de_DE.utf8")
 (keyboard-layout (keyboard-layout "de"
                                   #:options '("caps:swapescape")))
 (kernel linux)
 (initrd microcode-initrd)
 (firmware (list linux-firmware))
 (bootloader (bootloader-configuration
              (bootloader grub-efi-bootloader)
              (targets '("/boot/efi"))
              (keyboard-layout keyboard-layout)))
 (file-systems (append (list (file-system
                              (device (file-system-label "EFI"))
                              (mount-point "/boot/efi")
                              (type "vfat"))
                             (file-system
                              (device (file-system-label "guix"))
                              (mount-point "/")
                              (type "xfs")))
                       %base-file-systems))
 (groups (cons* (user-group
                  (name "plugdev")
                  (system? #t))
                %base-groups))
 (users (cons* (user-account
                (name "zilti")
                (group "users")
                (supplementary-groups
                 '("avahi" "users"
                   "input"
                   "wheel"
                   "netdev"
                   "plugdev"
                   "audio"
                   "cdrom"
                   "video"
                   "libvirt"
                   "lp")))
               %base-user-accounts))
 (packages (append
            (list bluez-firmware
                  font-terminus
                  fwupd-nonfree
                  git
                  hwdata
                  i915-firmware
                  linux-pam
                  readline
                  xf86-video-amdgpu
                  xf86-video-intel
                  amdgpu-firmware
                  amd-microcode
                  intel-microcode
                  hyprland
                  qtwayland)
            %base-packages))
 (services
  (append (modify-services %desktop-services
                           (delete screen-locker-service-type)
                           (delete pulseaudio-service-type)
                           (delete gdm-service-type)
                           (guix-service-type
                            config =>
                            (guix-configuration
                             (inherit config)
                             (channels (cons* (channel
                                               (name 'nonguix)
                                               (url
                                                "https://gitlab.com/nonguix/nonguix")
                                               (introduction
                                                (make-channel-introduction
                                                 "897c1a470da759236cc11798f4e0a5f7d4d59fbc"
                                                 (openpgp-fingerprint
                                    "2A39 3FFF 68F4 EF7A 3D29  12AF 6F51 20A0 22FB B2D5"))))
                                %default-channels))
               (substitute-urls (append (list
                                         "https://substitutes.nonguix.org")
                                        %default-substitute-urls))
               (authorized-keys (append (list
                                         (local-file
                                          "./keys/non-guix.pub"))
                                        %default-authorized-guix-keys))))
             (network-manager-service-type
              config =>
              (network-manager-configuration (inherit
                                              config)
                                             (vpn-plugins
                                              (list
                                               network-manager-openvpn)))))
           (list (service tlp-service-type
                          (tlp-configuration))
                 ;; (udev-rules-service 'custom-udev
                 ;; `(,(file->udev-rule "50-zsa.rules"
                 ;; "/home/zilti/.local/guixconfig/udev/50-zsa.rules")))
                 (service plasma-desktop-service-type
                          (plasma-desktop-configuration))
                 (service sddm-service-type
                          (sddm-configuration (theme "maya")))
                 (service thermald-service-type
                          (thermald-configuration (adaptive? #t)))
                 (service bluetooth-service-type
                          (bluetooth-configuration))
                 (service earlyoom-service-type
                          (earlyoom-configuration (minimum-available-memory 5)
                                                  (minimum-free-swap 5)))
                 (service inputattach-service-type
                          (inputattach-configuration))
                 (service libvirt-service-type
                          (libvirt-configuration (unix-sock-group "libvirt")))
                 (service nix-service-type
                          (nix-configuration))
                 (service virtlog-service-type
                          (virtlog-configuration))
                 (service fstrim-service-type
                          (fstrim-configuration))
                 (service fprintd-service-type
                          (fprintd-configuration)))

           (list polkit-wheel-service)
           (list (service pam-limits-service-type
                          (list (pam-limits-entry "*"
                                                  'both
                                                  'nofile 524288))))
           (list (service unattended-upgrade-service-type
                          (unattended-upgrade-configuration
                           (schedule
                            "5 12 * * 1")
                           (channels #~(cons* (channel
                                               (name 'nonguix)
                                               (url "https://gitlab.com/nonguix/nonguix")
                                               (introduction
                                                (make-channel-introduction
                                                 "897c1a470da759236cc11798f4e0a5f7d4d59fbc"
                                                 (openpgp-fingerprint
                                                  "2A39 3FFF 68F4 EF7A 3D29  12AF 6F51 20A0 22FB B2D5"))))
                                              %default-channels)))))))
  (name-service-switch %mdns-host-lookup-nss))