{ config, pkgs, lib, ... }:

{
  boot.loader.grub.enable = false;
  boot.loader.generic-extlinux-compatible.enable = true;
  boot.kernelPackages = pkgs.linuxPackages_hardkernel_4_14;

  nix.binaryCaches = lib.mkForce [ "http://nixos-arm.dezgeg.me/channel" ];
  nix.binaryCachePublicKeys = [ "nixos-arm.dezgeg.me-1:xBaUKS3n17BZPKeyxL4JfbTqECsT+ysbDJz29kLFRW0=%" ];

  fileSystems = {
    "/boot" = {
      device = "/dev/disk/by-label/boot";
      fsType = "vfat";
    };
    "/" = {
      device = "/dev/disk/by-label/root";
      fsType = "ext4";
    };
  };

  services.sshd.enable = true;
  services.weechat.enable = true;
  services.transmission.enable = true;

  swapDevices = [ { device = "/dev/disk/by-label/swap"; } ];

  environment = {
    systemPackages = with pkgs; [
      cryptsetup
      htop
      zsh
      nmap
      tmux
      kakoune
      wget
    ];
  };

  networking.hostName = "loki";

  time.timeZone = "America/Denver";

  security.sudo = {
    enable = true;
    wheelNeedsPassword = true;
  };

  users = {
    extraUsers.dmitriy = {
      isNormalUser = true;
      home = "/home/dmitriy";
      uid = 1000;
      extraGroups = [ "weechat" "wheel" "transmission" ];
      openssh.authorizedKeys.keys = ["ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAz0FdNzA+aworTtvhnPBqk6w8LkI7Oa1I4X2rJm+wk+Lbp4RNN4W5bMW/mqafvI86C0QG2AMqheFUWIRoRGnjytTTdgUVVy6hTofD9itP44A07ZF+FtoD8P1ECG6/4NtFTb8xNdKfjDFIn1LbKxMes9TOOrB/orAevJs74oCq5OrMXBICxRoIvuiJp6vgwMWVbgxtjstVtIS4edaIKI12jFG3KCgvGGYNSMt+9gsc5yT7N0LIsuRhbi//L8dtVSb+NeDlUWV28CuFFSCjxnA1SF9ZKjGlwcOZKM4bcFMLIwNM08AhVC7HisuusJcuy8+HbRj4jsm0vrwPtjTHJmQD dmitriyf@dmitriy.irv.corp.google.com"];
    };
  };

  programs = {
    zsh.enable = true;
  };
}