# https://search.nixos.org/options
{
  inputs,
  config,
  pkgs,
  lib,
  ...
}: let
  user = config.user;
in {
  nix = {
    settings = {
      experimental-features = ["nix-command" "flakes"];
    };
    settings.trusted-users = ["root" user];

    registry.nixpkgs.flake = inputs.nixpkgs;
  };

  boot.loader.grub = {
    enable = true;
    device = "nodev";
    efiSupport = true;
  };
  boot.loader.efi.canTouchEfiVariables = true;

  networking.networkmanager.enable = true;

  services.tailscale.enable = true;
  networking.firewall.interfaces.tailscale0 = {
    allowedTCPPortRanges = [
      {
        from = 0;
        to = 65535;
      }
    ];
  };

  time.timeZone = lib.mkDefault "Europe/London";

  console = {
    font = "Lat2-Terminus16";
    useXkbConfig = true;
  };

  services.avahi.enable = true;

  i18n.defaultLocale = lib.mkDefault "en_GB.UTF-8";

  services.xserver.xkb = {
    layout = lib.mkDefault "gb";
    options = "caps:escape";
  };

  system.configurationRevision =
    pkgs.lib.mkIf (inputs.self ? rev)
    inputs.self.rev;

  users.users.${user} = {
    isNormalUser = true;
    extraGroups = ["wheel" "video" "networkmanager" "kvm"];
    initialPassword = "pass";
    shell = pkgs.zsh;
  };
  programs.zsh.enable = true;

  environment.variables = {
    EDITOR = "nvim";
    VISUAL = "nvim";
  };
  environment.pathsToLink = ["/share/zsh"];

  services.gvfs.enable = true;

  environment.systemPackages = with pkgs; [
    tealdeer
    alsa-utils
    trash-cli
    wget
    unzip
    fzf
  ];

  programs.tmux.enable = true;
  programs.tmux.extraConfig = ''
    set escape-time 0
    set -g default-terminal screen

    bind -n M-s split-window -v
    bind -n M-v split-window -h
    bind -n M-Enter split-window -h
    bind -n M-h select-pane -L
    bind -n M-j select-pane -D
    bind -n M-k select-pane -U
    bind -n M-l select-pane -R
    bind -n M-q kill-pane
    bind -n M-< resize-pane -L 10
    bind -n M-> resize-pane -R 10
    bind -n M-- resize-pane -D 10
    bind -n M-+ resize-pane -U 10
    bind -n M-u copy-mode
    bind -n M-p paste-buffer

    set-window-option -g mode-keys vi
    bind-key -T copy-mode-vi v send-keys -X begin-selection
    bind-key -T copy-mode-vi y send-keys -X copy-selection
  '';

  boot.kernel.sysctl = {
    "net.ipv4.ip_unprivileged_port_start" = 53;
  };

  services.prometheus.exporters.node = {
    enable = true;
    enabledCollectors = [ "systemd" ];
  };
}