{ nvim-flake, nixfmt, ... }:
{ pkgs, config, ... }:
{
  local = {
    remoteBuild.isBuilder = true;
    X11Programs = {
      sxhkd.enable = true;
    };
    DE.dwm.enable = true;
    DM = {
      lightdm.enable = true;
      autoLogin = true;
      loginUser = "gerg";
    };
    theming = {
      enable = true;
      kmscon.enable = true;
    };
    allowedUnfree = [ "nvidia-x11" ];
  };
  boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
  hardware.nvidia = {
    package = config.boot.kernelPackages.nvidiaPackages.beta;
    nvidiaPersistenced = false;
    nvidiaSettings = false;
    modesetting.enable = true;
    open = false;
  };
  services.xserver = {
    videoDrivers = [
      "nvidia"
      "amdgpu"
    ];
  };

  programs.direnv = {
    enable = true;
    loadInNixShell = false;
    silent = true;
  };

  nix.settings.system-features = [
    "kvm"
    "big-parallel"
    "nixos-test"
    "benchmark"
  ];

  environment = {
    systemPackages =
      let
        fmt = pkgs.nixfmt.overrideAttrs {
          version = "0.6.0-${nixfmt.shortRev}";

          src = nixfmt;
        };
      in
      builtins.attrValues {
        inherit (pkgs)
          bitwarden # store stuff
          qbittorrent # steal stuff
          pavucontrol # gui volume control
          pcmanfm # file manager
          librewolf # best browser
          vlc # play stuff
          ripgrep
          fd
          jq
          xautoclick
          prismlauncher
          deadnix
          statix
          nix-index
          element-desktop
          webcord
        ;
        inherit (nvim-flake.packages) neovim;
        inherit fmt;
        lint = pkgs.writeShellApplication {
          name = "lint";
          runtimeInputs = [
            fmt
            pkgs.deadnix
            pkgs.statix
            pkgs.fd
          ];

          text = ''
            if [ -z "''${1:-""}" ]; then
              fd '.*\.nix' . -x statix fix -- {} \;
              fd '.*\.nix' . -X deadnix -e -- {} \; -X nixfmt {} \;
            else
              statix fix -- "$1"
              deadnix -e "$1"
              nixfmt "$1"
            fi
          '';
        };
      };
    etc = {
      "jdks/17".source = "${pkgs.openjdk17}/bin";
      "jdks/8".source = "${pkgs.openjdk8}/bin";
    };
  };

  services.udev.packages = [ pkgs.android-udev-rules ];
  programs.adb.enable = true;

  networking = {
    useNetworkd = false;
    useDHCP = false;
    hostId = "288b56db";
    firewall.enable = true;
  };

  systemd.network = {
    enable = true;
    netdevs."br0" = {
      netdevConfig = {
        Kind = "bridge";
        Name = "br0";
      };
    };
    networks = {
      "enp11s0" = {
        name = "enp11s0";
        bridge = [ "br0" ];
        linkConfig.RequiredForOnline = "enslaved";
      };
      "br0" = {
        name = "br0";
        address = [ "192.168.1.4/24" ];
        gateway = [ "192.168.1.1" ];
        dns = [ "192.168.1.1" ];
        DHCP = "no";
        bridgeConfig = { };
        linkConfig = {
          MACAddress = "D8:5E:D3:E5:47:90";
          RequiredForOnline = "routable";
        };
      };
    };
  };

  #user managment
  sops.secrets = {
    gerg.neededForUsers = true;
  };
  users = {
    mutableUsers = false;
    users = {
      gerg = {
        useDefaultShell = true;
        uid = 1000;
        isNormalUser = true;
        extraGroups = [
          "wheel"
          "audio"
          "adbusers"
          "plugdev"
        ];
        openssh.authorizedKeys.keys = [
          config.local.keys.gerg_gerg-phone
          config.local.keys.gerg_gerg-windows
        ];
        hashedPasswordFile = config.sops.secrets.gerg.path;
      };
      "root" = {
        uid = 0;
        home = "/root";
        hashedPassword = "!";
      };
    };
  };
  boot = {
    kernelModules = [ "amdgpu" ];
    initrd = {
      availableKernelModules = [
        "nvme"
        "xhci_pci"
        "ahci"
        "usbhid"
        "sd_mod"
      ];
      includeDefaultModules = false;
    };
  };

  system.stateVersion = "23.05";
  _file = ./main.nix;
}