nixos/hosts/game-laptop/main.nix

_: {
  pkgs,
  config,
  lib,
  ...
}: {
  local = {
    remoteBuild.enable = true;
    DE.gnome.enable = true;
    DM = {
      lightdm.enable = true;
      autoLogin = true;
      loginUser = "games";
    };
    theming = {
      enable = true;
      kmscon.enable = true;
    };
    allowedUnfree = [
      "nvidia-x11"
      "nvidia-persistenced"
      "steam"
      "steam-original"
    ];
  };
  environment = {
    systemPackages = builtins.attrValues {
      inherit
        (pkgs)
        neovim
        heroic
        legendary-gl
        prismlauncher
        pcmanfm #file manager
        librewolf #best browser
        obs-studio
        vlc
        webcord
        ;
    };
    etc = {
      "jdks/17".source = "${pkgs.openjdk17}/bin";
      "jdks/8".source = "${pkgs.openjdk8}/bin";
    };
  };

  networking.networkmanager.enable = true;

  services.openssh.settings.PermitRootLogin = lib.mkForce "prohibit-password";
  #user managment
  sops.secrets.root.neededForUsers = true;
  users = {
    mutableUsers = false;
    users = {
      games = {
        useDefaultShell = true;
        uid = 1000;
        isNormalUser = true;
        extraGroups = ["audio"];
        initialHashedPassword = "";
      };
      "root" = {
        uid = 0;
        home = "/root";
        openssh.authorizedKeys.keys = [
          config.local.keys.gerg_gerg-phone
          config.local.keys.gerg_gerg-windows
          config.local.keys.gerg_gerg-desktop
        ];
        hashedPasswordFile = config.sops.secrets.root.path;
      };
    };
  };
  hardware.bluetooth.enable = true;
  services.blueman.enable = true;
  boot = {
    initrd.availableKernelModules = ["nvme" "xhci_pci" "ahci"];
    kernelModules = ["kvm-amd"];
    kernelPackages = pkgs.linuxPackages_latest;
  };
  swapDevices = [
    {
      device = "/swapfile";
      size = 16 * 1024;
    }
  ];

  system.stateVersion = "23.05";
  _file = ./main.nix;
}