nixos/hosts/sparky/default.nix

{ inputs, config, lib, pkgs, outputs,... }:

{
  imports =
    [ 
      # Disk configuration
      inputs.disko.nixosModules.disko
      (import ../common/disks/std-disk-config.nix { device = "/dev/vda"; })
      ../common/optional/btrfs-impermanence.nix
      inputs.impermanence.nixosModules.impermanence

      # Import core options
      ./hardware-configuration.nix
      ../common/core

      # Create users for this host
      ../common/users/media

    ];

  nixpkgs = {
      overlays = [
        outputs.overlays.additions
        outputs.overlays.modifications
        outputs.overlays.unstable-packages
      ];
      config = {
        allowUnfree = true;
      };
    };

  nixpkgs = {
      overlays = [
        outputs.overlays.additions
        outputs.overlays.modifications
        outputs.overlays.unstable-packages
      ];
      config = {
        allowUnfree = true;
      };
    };
  
  fileSystems."/persist".neededForBoot = true;
  environment.persistence."/persist" = {
    hideMounts = true;
    directories = [
      "/etc/nixos"
      "/var/log"
      "/var/lib/nixos"
      "/var/lib/systemd/coredump"
      "/etc/NetworkManager/system-connections"
    ];
    users.media = {
        directories = [
          "sync"
          "keep"
          ".ssh"
        ];
    };
  };

  boot = {
    loader = {
      systemd-boot.enable = true;
      efi.canTouchEfiVariables = true;
      timeout = 3;
    };
  };

  networking = {
    hostName = "sparky";
    networkmanager.enable = true;
    enableIPv6 = false;
  };

  services = {
    qemuGuest.enable = true;
    openssh = {
      enable = true;
      ports = [22]; # FIXME: Make this use configVars.networking
      settings.PermitRootLogin = "yes";
      authorizedKeysFiles = lib.mkForce ["/etc/ssh/authorized_keys.d/%u"];
    };
  };
  services.libinput.enable = true;
  services.displayManager.defaultSession = "cinnamon";

	services.xserver = {
		enable = true;
		displayManager.lightdm.enable = true;
		desktopManager = {
			cinnamon.enable = true;
		};
	};

  security.pam = {
    sshAgentAuth.enable = true;
    services = {
      sudo.u2fAuth = true;
    };
  };

  nix.settings.experimental-features = [ "nix-command" "flakes" ];
  system.stateVersion = "23.11";
}