{ config, pkgs, ... }:

{
  imports =
    [ # Include the results of the hardware scan.
      ./hardware-configuration.nix
    ];

  boot.loader.grub.enable = true;
  boot.loader.grub.version = 2;
  # boot.loader.grub.efiSupport = true;
  # boot.loader.grub.efiInstallAsRemovable = true;
  # boot.loader.efi.efiSysMountPoint = "/boot/efi";
  # Define on which hard drive you want to install Grub.
  boot.loader.grub.device = "/dev/sda"; # or "nodev" for efi only

  networking.hostName = "nixos"; # Define your hostname.
  # networking.wireless.enable = true;
  networking.networkmanager.enable = true;

  i18n = {
    consoleFont = "Lat2-Terminus16";
    consoleKeyMap = "us";
    defaultLocale = "en_US.UTF-8";
  };

  time.timeZone = "Europe/Amsterdam";

  environment.systemPackages = with pkgs; [
    nixops networkmanagerapplet curl wget nmap telnet wireshark bluez gnupg
    tor torsocks tsocks privoxy ssmtp mailutils
    pa_applet gparted netcat-openbsd htop atop iotop strace tcpdump lsof
    libevent vim bash zsh bison ctags cron binutils file
    p7zip unzip
    arandr
    xfce.thunar
    xfce.xfce4notifyd
    xfce.xfce4_power_manager
    xfce.xfce4-hardware-monitor-plugin
    xfce.xfce4-screenshooter
    xfce.xfce4volumed
    xfce.xfce4settings
    xfce.xfconf
 ];

 fonts.fonts = with pkgs; [
    inconsolata terminus_font ubuntu_font_family
 ];

  # Some programs need SUID wrappers, can be configured further or are
  # started in user sessions.
  programs.mtr.enable = true;
  programs.gnupg.agent = { enable = true; enableSSHSupport = true; };

  fileSystems = [
    { device = "/dev/sda2";
      mountPoint = "/mnt";
    }

    { device = "/dev/sda1";
      mountPoint = "/storage";
      options = [ "rw" ];
    }
  ];

  swapDevices = [{ label = "swap";}];

  # Define a user account. Don't forget to set a password with ‘passwd’.
  users.users.guest = {
    name = "guest";
    group = "users";
    isNormalUser = true;
    uid = 1000;
    extraGroups = [ "wheel" "disk" "audio" "video" "networkmanager" ];
    home = "/home/guest";
    createHome = true;
    initialPassword = "";
  };

  users.defaultUserShell = "/run/current-system/sw/bin/bash";

  # List services that you want to enable:

  # Enable the OpenSSH daemon.
  services.openssh.enable = true;
  # services.sshd.enable = true;

  networking.firewall.enable = true;
  networking.firewall.allowPing = false;
  networking.firewall.allowedTCPPorts = [ ... ];
  networking.firewall.allowedUDPPorts = [ ... ];
  # Or disable the firewall altogether.
  # networking.firewall.enable = false;

  sound.enable = true;
  hardware.pulseaudio.enable = true;
  powerManagement.enable = true;

  services.tor.enable = true;
  services.tor.client.enable = true;
  services.printing.enable = true;

  services.xserver.enable = true;
  services.xserver.layout = "us";
  services.xserver.xkbOptions = "eurosign:e";

  # Enable touchpad support.
  services.xserver.libinput.enable = true;

  services.xserver.desktopManager = {
    xfce.enable = true;
    default = "xfce";
  };

  services.postgresql.enable = true;
  services.postgresql.package = pkgs.postgresql94;

  # This value determines the NixOS release with which your system is to be
  # compatible, in order to avoid breaking some software such as database
  # servers. You should change this only after NixOS release notes say you
  # should.
  system.nixos.stateVersion = "18.03"; # Did you read the comment?

}