guix system

;; This is an operating system configuration template
;; for a "desktop" setup with GNOME and Xfce where the
;; root partition is encrypted with LUKS, and a swap file.

(use-modules
 (gnu)
 (gnu system nss)
 (nongnu packages firmware)
 (nongnu packages linux)
 (nongnu system linux-initrd)
 (nongnu packages nvidia)
 (nongnu services nvidia)
 (guix utils))
(use-service-modules
 databases
 desktop
 networking
 xorg
 avahi
 ssh
 shepherd
 pm)
(use-package-modules
 certs
 avahi
 xorg
 gl
 lisp
 wm
 fonts
 gcc
 gnome
 shells
 commencement
 firmware
 glib
 curl
 linux
 ssh
 gnupg
 ncurses
 )

(operating-system
  (host-name "monad")
  (timezone "rand_earth_loc_joke")
  (locale "en_US.utf8")
  (initrd microcode-initrd)
  (kernel linux)
  (kernel-arguments '("modprobe.blacklist=nouveau"))
  (firmware (list linux-firmware))

  (keyboard-layout (keyboard-layout "us" #:options '("ctrl:nocaps")))


  ;; useh the UEFI variant of GRUB with the EFI System
  ;; Partition mounted on /boot/efi.
  (bootloader (bootloader-configuration
                (bootloader grub-efi-removable-bootloader)
                (targets '("/boot"))))

  (file-systems (append
                 (list (file-system
                         (device "/dev/nvme0n1p3")
                         (mount-point "/")
                         (type "ext4"))
                       (file-system
                         (device "/dev/nvme0n1p1")
                         (mount-point "/boot")
                         (type "vfat")))
                 %base-file-systems))

  ;; Create user `bob' with `alice' as its initial password.
  (users (cons (user-account
                (name "I")
                (comment "ouroboros")
                (group "users")
		(shell (file-append fish "/bin/fish"))
                (supplementary-groups '("wheel" "netdev"
                                        "audio" "video")))
               %base-user-accounts))

  ;; This is where we specify system-wide packages.
  (packages (cons* curl
		   iproute
		   openssh
                   light
		   fish
                   glibc-locales
		   gnupg
         	   ncurses
		   glibc-utf8-locales
		   openbios-qemu-ppc
                   %base-packages))

  (services (cons* (service bluetooth-service-type)
		   (service gpm-service-type)
		   (service nvidia-service-type)
		   (service openssh-service-type)
		   polkit-wheel-service
		   (service postgresql-service-type
			    (postgresql-configuration
			     (config-file
			      (postgresql-config-file
			       (log-destination "stderr")
			       (hba-file
				(plain-file
				 "pg_hba.conf"
"
local	all	all			trust
host	all	all	127.0.0.1/32 	md5
host	all	all	::1/128 	md5"
))
			       (extra-config
				'(("session_preload_libraries"     "auto_explain")
				  ("random_page_cost"              2)
				  ("auto_explain.log_min_duration" "100 ms")
				  ("work_mem"                      "500 MB")
				  ("logging_collector"             #t)
				  ("log_directory"                 "/var/log/postgresql")))))))
		   (service tlp-service-type)
		   (service usb-modeswitch-service-type)
		   (modify-services %desktop-services
				    (guix-service-type config =>
						       (guix-configuration
							(inherit config)
							(substitute-urls
							 (append (list "https://substitutes.nonguix.org")
								 %default-substitute-urls))
							(authorized-keys
							 (append (list
								  (plain-file "non-guix.pub"
									      "(public-key
 (ecc
  (curve Ed25519)
  (q #C1FD53E5D4CE971933EC50C9F307AE2171A2D3B52C804642A7A35F84F3A4EA98#)
  )
 )"))
								 %default-authorized-guix-keys))))

				    (delete gdm-service-type))))

  (name-service-switch %mdns-host-lookup-nss))