{ lib, config, pkgs, callPackage, ... }:

{
  imports =
    [
      ./hardware-configuration.nix
      /etc/nixos/cachix.nix
    ];
  nix = {
    extraOptions = "experimental-features = nix-command flakes";
    package = pkgs.nixVersions.unstable;
  };

  # Use the systemd-boot EFI boot loader.
  boot.kernelPackages = pkgs.linuxPackages_zen;
  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;
  boot.initrd.kernelModules = [ "i915" ];

  nixpkgs.config.allowUnfree = true;

  boot.kernelParams = [ "mem_sleep_default=deep" "nvme.noacpi=1" ];
  hardware.cpu.intel.updateMicrocode =
    lib.mkDefault config.hardware.enableRedistributableFirmware;

  hardware.acpilight.enable = lib.mkDefault true;

  networking.hostName = "syl"; # Define your hostname.
  networking.networkmanager.enable = true;
  # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.

  # Set your time zone.
  time.timeZone = "America/Chicago";

  # The global useDHCP flag is deprecated, therefore explicitly set to false here.
  # Per-interface useDHCP will be mandatory in the future, so this generated config
  # replicates the default behaviour.
  networking.useDHCP = false;
  networking.interfaces.wlp170s0.useDHCP = true;

  virtualisation.podman.enable = true;
  virtualisation.docker.enable = true;
  virtualisation.libvirtd = {
    enable = true;
    qemu = {
      runAsRoot = false;
      ovmf = {
        enable = true;
        packages = [
          pkgs.OVMFFull.fd
          pkgs.pkgsCross.aarch64-multiplatform.OVMF.fd
        ];
      };
      swtpm.enable = true;
    };
  };

  # Select internationalisation properties.
  i18n.defaultLocale = "en_US.UTF-8";

  hardware.uinput.enable = true;

  hardware.bluetooth.enable = true;

  nixpkgs.config.packageOverrides = pkgs: {
    vaapiIntel = pkgs.vaapiIntel.override { enableHybridCodec = true; };
  };

  hardware.opengl = {
    enable = true;
    extraPackages = with pkgs; [
      intel-media-driver # LIBVA_DRIVER_NAME=iHD
      vaapiIntel         # LIBVA_DRIVER_NAME=i965 (older but works better for Firefox/Chromium)
      libvdpau-va-gl
    ];
  };

  services.xserver.videoDrivers = ["intel"];

  boot.supportedFilesystems = [ "ntfs" ];
  services.xserver = {
    enable = true;
    windowManager.awesome = {
      enable = true;
      package = pkgs.awesome;
    };
    displayManager = {
      startx.enable = true;
      defaultSession = "plasmawayland";
      sddm = {
        enable = true;
        enableHidpi = true;
      };
    };
    desktopManager.plasma5 = {
      enable = true;
      runUsingSystemd = true;
    };
    # desktopManager.gnome.enable = true;
  };
  
  services.avahi = {
    enable = true;
    nssmdns = true;
  };

  # Configure keymap in X11
  services.xserver.layout = "us";
  # services.xserver.xkbOptions = "eurosign:e";

  systemd.services.display-manager = {
    wants = [ "systemd-user-sessions.service" "multi-user.target" "network-online.target" ];
    after = [ "systemd-user-sessions.service" "multi-user.target" "network-online.target" ];
  };

  # Enable CUPS to print documents.
  services.printing.enable = true;
  services.printing.drivers = [ pkgs.gutenprint pkgs.gutenprintBin pkgs.hplipWithPlugin ]; 

  # Enable fingerprint
  services.fprintd.enable = true;
  # programs.qt5ct.enable = true;

  # Enable sound.
  security.rtkit.enable = true;
  services.pipewire = {
    enable = true;
    alsa.enable = true;
    alsa.support32Bit = true;
    pulse.enable = true;
    wireplumber.enable = true;
  };
  
  # Needed for some pipewire progs and other gtk apps
  programs.dconf.enable = true;

  # Turn on flatpak
  services.flatpak.enable = true;

  # Some other things
  services.thermald.enable = true;
  services.power-profiles-daemon.enable = false;
  services.tlp = {
    enable = true;
    settings = {
      CPU_SCALING_GOVERNOR_ON_AC="performance";
      CPU_SCALING_GOVERNOR_ON_BAT="powersave";
      CPU_ENERGY_PERF_POLICY_ON_AC="balance_performance";
      CPU_ENERGY_PERF_POLICY_ON_BAT="power";
      PCIE_ASPM_ON_AC="default";
      PCIE_ASPM_ON_BAT="powersupersave";
      SCHED_POWERSAVE_ON_AC=0;
      SCHED_POWERSAVE_ON_BAT=1;
      START_CHARGE_THRESH_BAT1=70;
      STOP_CHARGE_THRESH_BAT1=80;
      USB_ALLOWLIST="32ac:0002";
    };
  };

  services.usbmuxd.enable = true;
  services.fstrim.enable = true;

  # Enable touchpad support (enabled default in most desktopManager).
  services.xserver.libinput.enable = true;

  # Set default shell to be dash for speed
  # Apparently this is bad because a lot of nix relies on bash
  # environment.binsh = "${pkgs.dash}/bin/dash";
  
  environment.homeBinInPath = true;
  programs.fish.enable = true;
  programs.zsh.enable = true;

  environment.variables = {
      EDITOR = "emacsclient -t -a";
      VISUAL = "emacsclient -c -a";
      # Fixing Qt apps in other environments
      # Thought I needed this but apparently they are working fine without it.
      # QT_XCB_GL_INTEGRATION = "xcb_egl";
      # QT_QPA_PLATFORM_PLUGIN_PATH = "${pkgs.qt5.qtbase.bin}/lib/qt-${pkgs.qt5.qtbase.qtCompatVersion}/plugins/platforms";
    VDPAU_DRIVER = lib.mkIf config.hardware.opengl.enable (lib.mkDefault "va_gl");
  };

  # Define a user account. Don't forget to set a password with ‘passwd’.
  users.users.chris = {
    isNormalUser = true;
    extraGroups = [ "wheel" "networkmanager" "input" "uinput" ];
  };

  programs.partition-manager.enable = true;
  programs.kdeconnect.enable = true;

  security.pam.services.kwallet = {
    name = "kwallet";
    enableKwallet = true;
  };
  security.pam.services.sddm.enableKwallet = true;

  # virtualisation.waydroid.enable = true;

  # nixpkgs.config.firefox.enableTridactyl = true;

  # List packages installed in system profile. To search, run:
  # $ nix search wget
  environment.systemPackages = with pkgs; [
    vim
    wget
    killall
    git
    tmux
    dutree
    cachix
    unzip
    unrar
    p7zip
    zip
    gzip
    usbutils
    binutils
    podman-compose
    exa
    # img2pdf
    yt-dlp
    bat
    rsync
    jq
    ripgrep
    fd
    ffmpeg-full
    imagemagick
    libheif
    trash-cli
    htop
    btop
    bc 
    sysstat
    procs
    pandoc
    samba
    blesh
    # OVMFFull
    quickemu
    discover
    # kde-rounded-corners
    lightly-qt
    pinentry
    pinentry-qt
    hunspell
    caffeine-ng
    hunspellDicts.en_US
    transmission
    openssh
    ark
    ifuse
    dash
    light
    ttyper
    kget
    audacity
    krename
    kwallet-pam
    plasma5Packages.kwallet
    sierra-breeze-enhanced
    libimobiledevice
    sddm-kcm
    ydotool
    bottles
    jitsi-meet-electron
    imv
    feh
    tagutil
    python310Packages.mutagen
    python310Packages.audiotools
    mpv
    nerdfonts
    latte-dock
    alacritty
    # libsForQt5.bismuth
    libnotify
    rofi-wayland
    waybar
    eww
    wlrctl
    hyprpaper
    swaylock-fancy
    aha
    glxinfo
    vulkan-tools
    wayland-utils
    # mkchromecast
    plocate
    # librepresenter.libre-presenter
    papirus-icon-theme
    phinger-cursors
    plasma-hud
    kde-cli-tools
    gzip 
    qrencode
    brave
    scribus
    # appflowy
    darktable
    qutebrowser
    virt-manager
    virt-viewer
    # firefox
    kate
    kdialog
    plasma5Packages.khotkeys
    openlp
    inkscape
    libreoffice-fresh
    vlc
    neochat
    haskellPackages.greenclip
    pulsemixer
    any-nix-shell
    wtype
    xdotool
    wmctrl
    xcape
    xclip
    maim
    unclutter-xfixes
    bluez-tools
    networkmanager_dmenu
    plasma5Packages.qt5ct
    lxappearance
    spotdl
    kdenlive
    # natron
    digikam
    rubberband
    texlive.combined.scheme-full
    wlroots
    picom-next
    pamixer
    playerctl
    jellyfin-mpv-shim
    pfetch
    macchina
    gimp
    powertop
    element-desktop-wayland
    scrcpy
    python
    python3
    airshipper
    # hyprland
    
    neofetch
    afetch
    yafetch
    freshfetch
    disfetch
    bunnyfetch
    fet-sh
    macchina
    # Dev tools
    # android-tools
    nix-index
    meson
    ninja
    gnumake
    gcc
    gdb
    clang
    clang-tools
    cmake 
    qtcreator
    extra-cmake-modules
    pkg-config
    libsForQt5.wrapQtAppsHook
    python310Packages.pyqt5
    # LIBRARIES FOR DEV
    qt5.full
    qt5.qtbase
    qt5.qtquickcontrols2
    qt5.qtx11extras
    libsForQt5.appstream-qt
    libsForQt5.kdelibs4support
    libsForQt5.kirigami2
    libsForQt5.ki18n
    libsForQt5.kcoreaddons
    # plasma5Packages.kirigami2
    sqlite
    fennel
    (with import <nixpkgs> {}; libsForQt5.callPackage ../../LightlyShaders {})
    # (with import <nixpkgs> {}; libsForQt5.callPackage /home/chris/dev/church-presenter {})

    # (with import <nixpkgs> {}; libsForQt5.callPackage ../../bismuth {})
  ];

  services.emacs = {
    enable = true;
    package = with pkgs; ((emacsPackagesFor emacsPgtkNativeComp).emacsWithPackages (epkgs: [ epkgs.vterm epkgs.magit epkgs.pdf-tools pkgs.mu ]));
  };

  services.samba-wsdd.enable = true;
  services.samba = {
    enable = true;
    extraConfig = ''
        workgroup = WORKGROUP                                     
        server string = smbnix
        netbios name = smbnix
        security = user 
        #use sendfile = yes
        #max protocol = smb2
        # note: localhost is the ipv6 localhost ::1
        hosts allow = 192.168.0. 127.0.0.1 localhost
        hosts deny = 0.0.0.0/0
        guest account = nobody
        map to guest = bad user
    '';
    shares = {
      public = {
        path = "/home/chris/Public";
        "read only" = false;
        browsable = true;
        "guest ok" = true;
        comment = "Share";
      };
    };
  };

  # Some programs need SUID wrappers, can be configured further or are
  # started in user sessions.
  # programs.mtr.enable = true;
  # programs.gnupg.agent = {
  #   enable = true;
  #   enableSSHSupport = true;
  # };

  # List services that you want to enable:

  # Enable the OpenSSH daemon.
  services.openssh.enable = true;

  # Open ports in the firewall.
  # networking.firewall.allowedTCPPorts = [ ... ];
  # networking.firewall.allowedUDPPorts = [ ... ];
  # Or disable the firewall altogether.
  # networking.firewall.enable = false;

  # This value determines the NixOS release from which the default
  # settings for stateful data, like file locations and database versions
  # on your system were taken. It‘s perfectly fine and recommended to leave
  # this value at the release version of the first install of this system.
  # Before changing this value read the documentation for this option
  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
  system.stateVersion = "21.11"; # Did you read the comment?

}
