;; Copyright (C) 2022 Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
;;
;; This program is free software: you can redistribute it and/or modify
;; it under the terms of the GNU General Public License as published by
;; the Free Software Foundation, either version 3 of the License, or
;; (at your option) any later version.
;;
;; This program is distributed in the hope that it will be useful,
;; but WITHOUT ANY WARRANTY; without even the implied warranty of
;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
;; GNU General Public License for more details.
;;
;; You should have received a copy of the GNU General Public License
;; along with this program.  If not, see <https://www.gnu.org/licenses/>.

(use-modules
  (gnu)
  (gnu packages admin)
  (gnu packages emacs)
  (gnu packages gnome)
  (gnu packages ntp)
  (gnu packages screen)
  (gnu packages vim))
(use-package-modules version-control xdisorg)
(use-service-modules desktop networking sddm ssh xorg)

(operating-system
  (locale "en_US.utf8")
  (timezone "Europe/Paris")
  (keyboard-layout
    (keyboard-layout "us" "altgr-intl"))
  (host-name "x60-base")
  (users (cons* (user-account
                  (name "gnutoo")
                  (comment "GNUtoo")
                  (group "users")
                  (home-directory "/home/gnutoo")
                  (supplementary-groups
                    '("wheel" "netdev" "audio" "video")))
                %base-user-accounts))
  (packages
    (append
      (list (specification->package "nss-certs")
        emacs
        git
        gvfs
        htop
        ntp
        redshift-wayland
        screen
        vim)
      %base-packages))
  (services
    (append
     (list
      (elogind-service)
      (service openssh-service-type
	       (openssh-configuration
		(permit-root-login #t)
		(password-authentication? #f)
		(challenge-response-authentication? #f)
                (use-pam? #f)
		;; (authorized-keys
		;; `(("root", (local-file "gnutoo.pub"))))))
                ))
            (service tor-service-type)
            ;; (service dhcp-client-service-type)
            (service xfce-desktop-service-type)
            (set-xorg-configuration
             (xorg-configuration
              (keyboard-layout keyboard-layout))
             sddm-service-type))
      %base-services))
  (bootloader
    (bootloader-configuration
      (bootloader grub-bootloader)
      (targets '("/dev/sda"))
      (terminal-outputs '(console))
      (keyboard-layout keyboard-layout)))
  (mapped-devices
    (list (mapped-device
            (source
              (uuid "12345678-abcd-1234-1234-1234567899ab"))
            (target "cryptroot")
            (type luks-device-mapping))))
  (file-systems
    (cons* (file-system
             (mount-point "/")
             (device "/dev/mapper/cryptroot")
             (type "ext4")
             (dependencies mapped-devices))
           %base-file-systems)))