(use-modules         (gnu)
             (gnu packages emacs)
             (gnu packages linux))
(use-service-modules networking ssh virtualization)
(use-package-modules certs tmux version-control
             ssh shells vim)

(operating-system

 (kernel linux-libre-6.7)

 (host-name "poincare")

 (timezone "UTC")

 (locale "en_US.utf8")

 (bootloader (bootloader-configuration
              (bootloader grub-efi-bootloader)
          (terminal-outputs '(console))
          (timeout 10)
              (targets '("/boot/efi"))))

 (kernel-arguments '("console=tty" "modprobe.blacklist=usbmouse,usbkbd"))

 (file-systems (append (list
            (file-system
             (device (uuid "38af4c98-42b6-389b-ad36-132e38af4c98"))
;            (device "/dev/vda2")
             (mount-point "/")
             (options "noatime")
             (type "ext4"))

            (file-system
             (device "/dev/vda1")
             (mount-point "/boot/efi")
             (type "vfat")))

               %base-file-systems))

 (users (cons (user-account
               (name "abbe")
               (group "users")
           (shell (file-append zsh "/bin/zsh"))
               (supplementary-groups '("wheel")))
              %base-user-accounts))

 (packages (append (list nss-certs tmux emacs-no-x vim git fossil)
           %base-packages))

 (services (append (list (service dhcp-client-service-type)

             (service openssh-service-type
                  (openssh-configuration
                   (openssh openssh-sans-x)
                   (port-number 22)
                   (accepted-environment '("COLORTERM" "LC_*" "LANG"))
                   (permit-root-login 'prohibit-password)
                   (password-authentication? #f)
                   (use-pam? #t)
                   (authorized-keys
                    `(("abbe" ,(local-file "authorized-keys.pub"))
                      ("root" ,(local-file "authorized-keys.pub"))))
                   ))

             (service qemu-guest-agent-service-type
                  (qemu-guest-agent-configuration)))

           (modify-services %base-services
                    (guix-service-type config => (guix-configuration
                                  (inherit config)
                                  (substitute-urls
                                   (append (list "https://substitutes.nonguix.org")
                                       %default-substitute-urls))
                                  (authorized-keys
                                   (append (list (local-file "./nonguix-signing-key.pub"))
                                       %default-authorized-guix-keys))))))))