{ config, pkgs, ...}:

{
  imports = [ ./vim.nix ./iscsi-boot.nix ./iscsi_module.nix ] ++ pixfix;
  environment.systemPackages = with pkgs; [
    gitAndTools.gitFull
    sqlite screen util nix-repl utillinuxCurses psmisc
    (pkgs.makeDesktopItem { name = "screen"; exec = "${pkgs.xterm}/bin/xterm -e ${pkgs.screen}/bin/screen -xRR"; desktopName = "Screen"; genericName = "screen"; categories = "System;TerminalEmulator;"; })
  ];
  programs = {
    screen.screenrc = ''
      defscrollback 5000
      caption always
      termcapinfo xterm 'Co#256:AB=\E[48;5;%dm:AF=\E[38;5;%dm'
      term xterm-256color
      defbce "on"
    '';
    ssh = {
      knownHosts = [
        { hostNames = [ "192.168.2.1" "router.localnet" ]; publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMSvyvC18BHfivZJDhWSm7VU3kEElfNfMIfeohkil614"; }
        { hostNames = [ "192.168.2.15" "amd.localnet" ]; publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJhJRINrY5cFcqZ76GsAK7FU+wQhErlS6APdOIm7xcnW"; }
        { hostNames = [ "192.168.2.30" "nix1.localnet" ]; publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN3cnHv8e6v3mQvVLc7f7YgbeHKqQY2UtySeNL8Ew4ro"; }
        { hostNames = [ "192.168.2.31" "nix2.localnet" ]; publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGG8XsjV3ufF2+SWc1isnYqry3tdIqA01GA4d+SSak/F"; }
      ];
    };
  };
  nixpkgs.config = {
    sqlite.interactive = true;
    packageOverrides = pkgs: (pkgs.lib.recursiveUpdate (public { inherit pkgs; }) ((import ./overrides.nix).packageOverrides pkgs));
  };
  system.extraSystemBuilderCmds = ''
    ln -sv ${./.} $out/nixcfg
  '';
  services = {
    openssh = {
      enable = true;
      permitRootLogin = "yes";
    };
  };
  nix = {
    trustedUsers = [ "builder" ];
    distributedBuilds = true;
    binaryCaches = [
      "http://cache.earthtools.ca"
      "http://nixcache.localnet"
      "https://cache.nixos.org"
    ];
    binaryCachePublicKeys = [
      "c2d.localnet-1:YTVKcy9ZO3tqPNxRqeYEYxSpUH5C8ykZ9ImUKuugf4c="
      "hydra.nixos.org-1:CNHJZBh9K4tP3EKF6FkkgeVYsS3ohTl+oS0Qa8bezVs="
    ];
  };
  users.extraUsers = {
    clever = {
      home = "/home/clever";
      isNormalUser = true;
      extraGroups = [ "wheel" "wireshark" ];
      uid = 1000;
      openssh.authorizedKeys.keys = with keys; [ clever.amd keys.ramboot clever.laptop ];
      initialHashedPassword = passwords.hashedPw;
    };
    builder = {
      uid = 1001;
      isNormalUser = true;
      openssh.authorizedKeys.keys = [ keys.dual.distro keys.nix1.distro keys.router.distro keys.nix2 keys.amd_distro ];
    };
    root.openssh.authorizedKeys.keys = with keys; [ keys.dual.distro clever.amd ];
  };
  users.extraGroups.wireshark.gid = 500;
}