#
# TODO:
#   - setdisplay gamma (gnome-gamma-tool)
#   - split into logical components (OS, hardware, ...)
#   - tablet-mode
#     - sensors
#   - home manager (???)
#
#
# Edit this configuration file to define what should be installed on
# your system.  Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’).

{ config, pkgs, lib, ... }: {
  imports = [ 
    # Include the results of the hardware scan.
    ./hardware-configuration.nix
  ];

  config = lib.mkMerge [
    # Base configuration...
    #
    # The configuration is split into two parts to allow for two stage updates to conserve space
    # on storage-limited systems.
    #
    # To run a two stage update do:
    #   $ sudo NIX_LIGHTWEIGHT=1 nixos-rebbuild switch
    #   $ reboot
    #   $ sudo nix-collect-garbage --delete-old
    #   $ sudo nixos-rebbuild switch
    #
    {
      nix.settings.experimental-features = [ 
        "nix-command" 
        "flakes"
      ];

      # Allow unfree packages
      nixpkgs.config.allowUnfree = true;


      # intel video drivers...
      # XXX move to hardware...
      nixpkgs.config.packageOverrides = pkgs: {
        intel-vaapi-driver = pkgs.intel-vaapi-driver.override { enableHybridCodec = true; };
      };
      #hardware.opengl = {
      hardware.graphics = {
        enable = true;
        extraPackages = with pkgs; [
          intel-media-driver # LIBVA_DRIVER_NAME=iHD
          intel-vaapi-driver # LIBVA_DRIVER_NAME=i965 (older but works better for Firefox/Chromium)
          libva-vdpau-driver
          libvdpau-va-gl
        ];
      };
      environment.sessionVariables = { LIBVA_DRIVER_NAME = "iHD"; }; # Force intel-media-driver
      

      # Bootloader.
      boot.loader.systemd-boot.enable = true;
      boot.loader.efi.canTouchEfiVariables = true;

      # XXX this is the same swap partition as fedora...
      boot.resumeDevice = "/dev/disk/by-uuid/6ac0c126-f701-43a5-8576-09cc76be1409";
      #boot.kernelParams = [ "systemd.unified_cgroup_hierarchy=0" "resume_offset=13465600" ];
      swapDevices = [ 
      #  { 
      #    device = "/var/lib/swapfile"; 
      #    size = 8*1024; 
      #  } 
        { device = "/dev/disk/by-uuid/6ac0c126-f701-43a5-8576-09cc76be1409"; } 
      ];

      boot.kernelPackages = pkgs.linuxPackages_latest;
      # prevent the console fonts from being reset on driver detect/load...
      # XXX move to hardware-specific-file...
      boot.initrd.kernelModules = [ "i915" ];

      # fix an issue with the touchpad/touchpoint not working after suspend...
      # XXX move to hardware-specific-file...
      boot.blacklistedKernelModules = [
        "i2c_i801"
      ];
      #powerManagement.resumeCommands = ''
      #  ${pkgs.kmod}/bin/modprobe -r i2c_i801
      #  ${pkgs.kmod}/bin/modprobe i2c_i801
      #'';

      # NOTE: this will be reset on loading of gpu driver, this can be fixed by preloading the 
      #       driver manually via:
      #         boot.initrd.kernelModules = [ "i915" ];
      console = {
        earlySetup = true;
        packages = with pkgs; [ 
          terminus_font 
        ];
        font = "ter-u18n";
      };

      # ThinkPad keyboard auto highlight...
      # XXX this fails...
      #services.tp-auto-kbbl = {
      #  enable = true;
      #  device = "/dev/input/event19";
      #  arguments = [
      #  ];
      #};

      networking.hostName = "yoga-nix";
      # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.

      # Configure network proxy if necessary
      # networking.proxy.default = "http://user:password@proxy:port/";
      # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";

      # Enable networking
      networking.networkmanager.enable = true;

      # Set your time zone.
      time.timeZone = "Europe/Moscow";

      # Select internationalisation properties.
      i18n.defaultLocale = "en_US.UTF-8";
      #i18n.supportedLocales = [
      #  "en_US.UTF-8"
      #  "ru_RU.UTF-8"
      #];
      i18n.extraLocaleSettings = {
        LC_ADDRESS = "ru_RU.UTF-8";
        LC_IDENTIFICATION = "ru_RU.UTF-8";
        LC_MEASUREMENT = "en_GB.UTF-8";
        LC_MONETARY = "ru_RU.UTF-8";
        LC_NAME = "ru_RU.UTF-8";
        LC_NUMERIC = "en_GB.UTF-8";
        LC_PAPER = "ru_RU.UTF-8";
        LC_TELEPHONE = "ru_RU.UTF-8";
        LC_TIME = "en_GB.UTF-8";
      };

      services.gpm.enable = true;

      services.devmon.enable = true;
      services.gvfs.enable = true;
      services.udisks2.enable = true;

      # Enable the X11 windowing system.
      services.xserver.enable = true;
      # Configure keymap in X11
      services.xserver.xkb = {
        layout = "us,ru";
        options = "grp:alt_shift_toggle";
      };
      services.xserver.excludePackages = [ 
        pkgs.xterm 
      ];
      services.xrdp.enable = true;
      services.xrdp.defaultWindowManager = "gnome-remote-desktop";
      services.xrdp.openFirewall = true;


      # Enable the GNOME Desktop Environment.
      services.displayManager.gdm.enable = true;
      services.desktopManager.gnome.enable = true;
      # set keyboard layouts and switching and othe key bindings...
      services.desktopManager.gnome.extraGSettingsOverrides = ''
        [org.gnome.desktop.input-sources]
        sources=[('xkb', 'us'),('xkb', 'ru')]
        per-window=true


        [org.gnome.desktop.wm.keybindings]
        switch-input-source=['<Alt>Shift_L']
        switch-input-source-backward=['<Shift>Alt_L']

        panel-run-dialog=['<Super>r']


        [org/gnome/settings-daemon/plugins/media-keys]
        custom-keybindings=['/org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom0/']

        [org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom0]
        binding='<Super>v'
        command='gvim'
        name='gvim'
      '';

      environment.gnome.excludePackages = [ 
        pkgs.gnome-tour 
      ];

      security.rtkit.enable = true;

      # Enable CUPS to print documents.
      services.printing.enable = true;

      # Pipewire...
      services.pulseaudio.enable = false;
      services.pipewire = {
        enable = true;
        alsa.enable = true;
        alsa.support32Bit = true;
        pulse.enable = true;
        jack.enable = true;
      };
      services.mpd = {
        enable = true;
        # XXX
        musicDirectory = "/home/f_lynx/Music";
        #extraConfig = ''
        #'';

        # Allow non-localhost connections
        #network.listenAddress = "any"; 
        # Systemd feature: only start MPD service upon connection to its socket
        #network.startWhenNeeded = true;
      };

      services.colord.enable = true;

      services.flatpak.enable = true;

      # Laptop configuration...
      services.logind.settings.Login.HandleLidSwitch = "lock";

      services.fwupd.enable = true;

      services.openssh.enable = true;

      services.keyd = {
        enable = true;
        keyboards = {
          default = {
            ids = ["*"];
            settings = {
              main = {
                # Modern ThinkPad's printscrn to menu key...
                sysrq = "overload(prtsc, compose)";

                rightshift = "overload(rightshift, rightshift)";
                rightalt = "overload(rightalt, rightalt)";
              };
              prtsc = {
                # Gnome: screenshot...
                rightshift = "sysrq";

                # Gnome: minimize/maximize...
                up = "M-up";
                down = "M-down";

                # Gnome: next/prev workspace...
                left = "M-A-left";
                right = "M-A-right";
              };
              "rightshift:S" = {
                # Gnome: screenshot...
                sysrq = "sysrq";
              };
              "rightalt:A" = {
                # Gnome: move window...
                left = "macro(A-f7 20ms left left enter)";
                right = "macro(A-f7 20ms right right enter)";
                up = "macro(A-f7 20ms up up enter)";
                down = "macro(A-f7 20ms down down enter)";
              };
            };
          };
        };
      };
      # group keyd keyboard with the rest of the internal HID devices letting libinput correctly
      # handle touchpad features line "disable while typing"...
      environment.etc."libinput/local-overrides.quirks".text = ''
        [keyd]
        MatchUdevType=keyboard
        MatchName=keyd virtual keyboard
        AttrKeyboardIntegration=internal
      '';

      services.syncthing = {
        enable = true;
        user = "f_lynx";
        configDir = "/home/f_lynx/.config/syncthing/";
        dataDir = "/home/f_lynx/Sync/";
      };

      # Tor
      # see: https://nixos.wiki/wiki/Tor
      services.tor = {
        enable = true;
        client.enable = true;
        torsocks.enable = true;

        settings = {
          UseBridges = true;

          # obfs4...
          #ClientTransportPlugin = "obfs4 exec ${pkgs.obfs4}/bin/lyrebird";
          ClientTransportPlugin = [
            "obfs4 exec ${pkgs.obfs4}/bin/lyrebird"
            "webtunnel exec ${pkgs.webtunnel}/bin/client"
            "snowflake exec ${pkgs.snowflake}/bin/client"
          ];
          Bridge = [
            # x1f...
            "webtunnel [2001:db8:cb1d:ca59:35a3:6d61:df7b:5d12]:443 147F464072959E1FEAC80FC782D620845468A22A url=https://gen001.akiel.dev/zqhIfuq3WOrrkCE90JPMsiLfoR4HWj0RgKsM8Wu98U ver=0.0.3"
            "webtunnel [2001:db8:3c5d:4c81:bd5f:d25b:5567:ffe3]:443 3D76FB0AAF9D3500D1792CED78E5846B63F5CAB4 url=https://ry8bvu1ft9.yyo.moe/633wcn8fbj ver=0.0.4"
            "obfs4 185.177.207.244:11244 9B5D1381000B3195BF2C0400ADE89A4CA9DE4EF1 cert=bKA4A4O1WezEItisqx170Z+23Md5nlqRJYYM1KLO13RzSDHClb5eZCrfvEt29Qh5vWUhCw iat-mode=0"
            "obfs4 212.51.140.71:26812 502478C5C3ACE2AE6D9EB4E85ED2D3F0799F451D cert=lIi+d2NVLePZTx9yLWuXwqV6nxl+OKLg8GfP7ITPI2U4SWb53yLIDeC5zS+n2uLyAfrGNw iat-mode=0"

            # telegram...
            "webtunnel [2001:db8:1f1e:4d2f:321b:6626:823e:c504]:443 4946C9B8410CF59953455C158F957CAB2055A61D url=https://mstdn.party/fooghee7naChifi0 ver=0.0.2"
            "webtunnel [2001:db8:9e1a:414a:6386:1721:6e09:cbaf]:443 1B6EBD6C1D5438C4AEE8D1C903F58754FE11E1BD url=https://www2.ruhnama.net/VsCk1XCZv5noySVy1CERKqkx ver=0.0.3"
            "webtunnel [2001:db8:5d90:6cd2:fcac:ea1c:67b2:bee0]:443 D85733AB26E770DC4AB2ED44A0559504550D0925 url=https://qbxa1hay.xoomlia.com/k0tf6syz/ ver=0.0.3"
            "webtunnel [2001:db8:78cb:8993:6b:38bc:a7cb:ff93]:443 8CD9BDB8EFE744D55852D140E2FB3EC93733B314 url=https://sabbatical.one/AxHffZruR1yyOamz64WtK58r ver=0.0.3"

            # orig...
            "obfs4 51.68.49.200:61511 D44D53FEBBD9BFB59726B5818CEAAC5A31DFDD24 cert=1Lc1kIQ84lYXsH3duofsZWh0Eb+xVVEmmsZP8YN8tLuFfjYghEgFfIsLmo78kXX383KMRw iat-mode=0"
            "obfs4 141.95.109.208:45280 377396B625F2A76E7DF51C1BF952EBD683EC3EA1 cert=R5X70kY6Hd4DdW8JbCsxBPMaMREIOwaqbwYGMff1NyPYUwLxnlQqzkP2fTD8uo2R7A5ROQ iat-mode=0"

            # test...
            #"snowflake 192.0.2.4:80 8838024498816A039FCBBAB14E6F40A0843051FA fingerprint=8838024498816A039FCBBAB14E6F40A0843051FA url=https://1098762253.rsc.cdn77.org/ fronts=www.cdn77.com,www.phpmyadmin.net ice=stun:stun.l.google.com:19302,stun:stun.antisip.com:3478,stun:stun.bluesip.net:3478,stun:stun.dus.net:3478,stun:stun.epygi.com:3478,stun:stun.sonetel.net:3478,stun:stun.uls.co.za:3478,stun:stun.voipgate.com:3478,stun:stun.voys.nl:3478 utls-imitate=hellorandomizedalpn"
            #"snowflake 192.0.2.4:80 8838024498816A039FCBBAB14E6F40A0843051FA fingerprint=8838024498816A039FCBBAB14E6F40A0843051FA url=https://1098762253.rsc.cdn77.org/ fronts=www.cdn77.com,www.phpmyadmin.net ice=stun:stun.l.google.com:19302,stun:stun.antisip.com:3478,stun:stun.bluesip.net:3478,stun:stun.dus.net:3478,stun:stun.epygi.com:3478,stun:stun.sonetel.net:3478,stun:stun.uls.co.za:3478,stun:stun.voipgate.com:3478,stun:stun.voys.nl:3478 utls-imitate=hellorandomizedalpn"
          ];
        };
      };

      # Define a user account. Don't forget to set a password with ‘passwd’.
      users.users.f_lynx = {
        isNormalUser = true;
        description = "Alex A. Naanou";
        extraGroups = [ "networkmanager" "wheel" ];
        packages = with pkgs; [
        ];
      };
      environment.localBinInPath = true;
      environment.variables.EDITOR = "vim";
      #environment.sessionVariables = rec {
      #  PATH = "~/bin/:$PATH";
      #};


      # List packages installed in system profile. To search, run:
      # $ nix search wget
      environment.systemPackages = with pkgs; [
        usbutils udiskie udisks
        exfat exfatprogs
        # XXX 20250614: does not build on 25.05
        #scrounge-ntfs

        vim-full
        #micro
        vifm mc far2l nnn broot 
        #ranger
        dos2unix

        psmisc
        #tdrop
        tmux
        tree
        btop htop iotop iftop
        ncdu dust

        # mostly needed for debugging...
        #libinput

        tlp acpi

        gparted
        #gdisk
        testdisk
        jdupes fdupes

        wget
        tor
        syncthingtray
        #shadowsocks-rust
        #shadowsocks-v2ray-plugin

        zip unzip

        # fonts...
        terminus_font 

        # GUI
        keepassxc
        #ulauncher
        kitty #ghostty
        #logseq
        # XXX this does not work on default gnome...
        wl-gammactl
        nextcloud-client

        # dev
        gitFull
        gnumake
        nodejs

        # Gnome stuff...
        gnome-tweaks
        dconf-editor
        gnome-remote-desktop
        gnomeExtensions.advanced-alttab-window-switcher
        gnomeExtensions.search-light
        gnomeExtensions.quick-settings-tweaker
        #gnomeExtensions.quake-mode
        gnomeExtensions.quake-terminal
        gnomeExtensions.gsconnect
        gnomeExtensions.dash-to-panel
        gnomeExtensions.blur-my-shell
        gnomeExtensions.unmess
        #gnomeExtensions.custom-accent-colors
        #gnomeExtensions.tray-icons-reloaded
        gnomeExtensions.appindicator
        gnomeExtensions.customize-ibus
        gnomeExtensions.date-menu-formatter
        gnomeExtensions.lock-keys
        gnomeExtensions.clipboard-indicator
        #gnomeExtensions.hibernate-status-button
        gnomeExtensions.power-off-options
        gnomeExtensions.caffeine
        gnomeExtensions.grand-theft-focus
        # XXX seems to be out of date for Gnome 46...
        gnomeExtensions.guillotine
        # XXX this seems to be missing...
        #   see: https://github.com/AstraExt/astra-monitor
        #gnomeExtensions.astra-monitor

        gnome-firmware
        gedit

      ];

      #programs.git.enable = true;
      programs.dconf.enable = true;

      # Some programs need SUID wrappers, can be configured further or are
      # started in user sessions.
      # programs.mtr.enable = true;
      # programs.gnupg.agent = {
      #   enable = true;
      #   enableSSHSupport = true;
      # };

      # ulauncher... 
      # XXX can't get ulauncher to be centered and focus on launch...
      #systemd.user.services.ulauncher = {
      #  enable = true;
      #  description = "Start Ulauncher";
      #  script = ''
      #    ${pkgs.coreutils-full}/bin/sleep 2
      #    ${pkgs.ulauncher}/bin/ulauncher --hide-window
      #  '';

      #  documentation = [ "https://github.com/Ulauncher/Ulauncher/blob/f0905b9a9cabb342f9c29d0e9efd3ba4d0fa456e/contrib/systemd/ulauncher.service" ];
      #  # XXX this does not work for some reason...
      #  #wantedBy = [ "graphical.target" ];
      #  wantedBy = [ "graphical-session.target" ];
      #  after = [ "display-manager.service" ];
      #};


      # Open ports in the firewall.
      # networking.firewall.allowedTCPPorts = [ ... ];
      # networking.firewall.allowedUDPPorts = [ ... ];
      # Or disable the firewall altogether.
      # networking.firewall.enable = false;


      # This value determines the NixOS release from which the default
      # settings for stateful data, like file locations and database versions
      # on your system were taken. It‘s perfectly fine and recommended to leave
      # this value at the release version of the first install of this system.
      # Before changing this value read the documentation for this option
      # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
      system.stateVersion = "23.05"; # Did you read the comment?
    }


    # Full config...
    (lib.mkIf (builtins.getEnv "NIX_LIGHTWEIGHT" == "") {

      programs.geary.enable = false;
      programs.firefox.enable = true;

      # XXX not sure who wants electron...
      nixpkgs.config.permittedInsecurePackages = [
        "electron-25.9.0"
      ];


      environment.systemPackages = with pkgs; [

        # cli
        tldr
        bat
        aspell

        sc-im visidata jq

        # devel...
        go
        python3
        electron
        #python311Packages.pygobject3
        #sbcl

        # LaTeX
        #texlive.combined.scheme-full 
        (texlive.combine {
          inherit (texlive) scheme-medium
          # missing:
          #   calc graphicx ifthen pgffor rotating trimclip xinttools 
          kvoptions xargs ifthenx iftex xint listofitems xkeyval
          etoolbox changepage pdfcomment eso-pic environ numprint xcolor
          pagecolor colorspace graphics adjustbox textpos fancyvrb flowfram
          fancyhdr pdfpages geometry varwidth hyphenat bigfoot lipsum 
          anyfontsize cprotect ccicons multitoc hardwrap catchfile 
          titlesec hypdoc doctools needspace xstring listings imakeidx  
          latexmk
          pax

          # fonts...
          opensans courier
          
          # languages...
          russ babel-russian hyphen-russian

          # photobook...
          photobook

          ;

          #(setq org-latex-compiler "lualatex")
          #(setq org-preview-latex-default-process 'dvisvgm)
        })

        # jdk - required by texlive-pax (BUG: no dependency??)
        temurin-jre-bin

        ungoogled-chromium
        #tor-browser

        blender
        rawtherapee
        krita
        gimp3-with-plugins

        # media...
        vlc mpv 
        cmus rmpc mpc
        yt-dlp media-downloader
        ffmpeg #ffmpegthumbnailer
        httrack

        exiftool vips
      ];

      # Nerd Fonts...
      fonts.packages = [
        pkgs.nerd-fonts.droid-sans-mono
      ];
      #fonts.packages = [ ... ] ++ builtins.filter lib.attrsets.isDerivation (builtins.attrValues pkgs.nerd-fonts);
      # all nerd fonts (~8G)...
      #fonts.packages = builtins.filter lib.attrsets.isDerivation (builtins.attrValues pkgs.nerd-fonts);

    }) 
  ];
}