NixOS/hosts/desktop/configuration.nix

{ config, pkgs, ... }:
{
  imports =
    [ # Include the results of the hardware scan.
      ./hardware-configuration.nix
    ];
  nixpkgs.overlays = [
    (_: prev: {
      openldap = prev.openldap.overrideAttrs {
        doCheck = false; # False is a bit more honest on x86_64 systems
      };
    })
  ];
  # Bootloader.
  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;
  boot.loader.systemd-boot.consoleMode = "auto";
  boot = {
    consoleLogLevel = 3;
    initrd.verbose = false;
    initrd.systemd.enable = true;
    kernelParams = [
      "quiet" "splash" "intremap=on" "boot.shell_on_fail" "udev.log_priority=3" "rd.systemd.show_status=auto" "ipv6.disable=1"
    ];
    plymouth.enable = true;
    plymouth.font = "${pkgs.hack-font}/share/fonts/truetype/Hack-Regular.ttf";
    plymouth.logo = "${pkgs.nixos-icons}/share/icons/hicolor/128x128/apps/nix-snowflake.png";
  };
  hardware.bluetooth = {
    enable = true;
    powerOnBoot = true;
      settings = {
        General = {
          Experimental = true;
          FastConnectable = true;
        };
      Policy = {
        AutoEnable = true;
      };
    };
  };
  services.dbus.implementation = "dbus";  
  networking.hostName = "damagedProperty"; # Define your hostname.
  networking.networkmanager.enable = true;
  networking.enableIPv6 = false;
  # Enable Flakes
  nix.settings.experimental-features = [ "nix-command" "flakes" ];
  time.timeZone = "America/New_York";
  i18n.defaultLocale = "en_US.UTF-8";
  i18n.extraLocaleSettings = {
    LC_ADDRESS = "en_US.UTF-8";
    LC_IDENTIFICATION = "en_US.UTF-8";
    LC_MEASUREMENT = "en_US.UTF-8";
    LC_MONETARY = "en_US.UTF-8";
    LC_NAME = "en_US.UTF-8";
    LC_NUMERIC = "en_US.UTF-8";
    LC_PAPER = "en_US.UTF-8";
    LC_TELEPHONE = "en_US.UTF-8";
    LC_TIME = "en_US.UTF-8";
  };
  services.xserver.xkb = {
    layout = "us";
    variant = "";
  };
  users.users.warrentyexpired = {
    isNormalUser = true;
    shell = pkgs.fish;
    description = "Micah L. Zellers";
    extraGroups = [ "networkmanager" "wheel" "input" "joystick" ];
    packages = with pkgs; [];
  };
  # Allow unfree packages
  nixpkgs.config.allowUnfree = true;
  environment.systemPackages = with pkgs; [
     wget
     tmux
     git
     keyd
     polkit_gnome
     unzip
     unrar
     mosh
     p7zip
     tmuxinator
     usbutils
     github-cli
     libdeflate
     fastfetch
     imv
     wl-clipboard
     btop
     fzf
     bat
     ncdu
     eza
     gnome-text-editor
     fuzzel
     ghostty
     xwayland
     xwayland-satellite
     vivaldi
     vivaldi-ffmpeg-codecs
     nautilus
     gnome-disk-utility
     discord
     gnome-calculator
     pinta
     vlc
     mpv
     quickshell
     matugen
     cliphist
     distrobox
     podman
     file-roller
     vicinae
     zed-editor
     mono
     screen
     (bottles.override { removeWarningPopup = true; })
     gnumake
     lazygit
  ];
  virtualisation.podman = {
    enable = true;
    dockerCompat = true;
    defaultNetwork.settings.dns_enable = true;
  };
  services.gvfs.enable = true;
  services.udisks2.enable = true;
  services.printing.enable = true;
  security.rtkit.enable = true;
  services.pipewire = {
    enable = true;
    alsa.enable = true;
    alsa.support32Bit = true;
    pulse.enable = true;
  };
  systemd.user.services.polkit-gnome-authentication-agent-1 = {
    description = "gnome-authentication-agent-1";
    wantedBy = [ "graphical-session.target" ];
    serviceConfig = {
      Type = "simple";
      ExecStart = "${pkgs.polkit_gnome}/libexec/polkit-gnome-authentication-agent-1";
      Restart = "on-failure";
      RestartSec = 1;
      TimeoutStopSec = 10;
    };
  };
  programs.nix-ld.enable = true;
  programs.nix-ld.libraries = with pkgs; [
    libpulseaudio
    alsa-lib
    icu
    openssl
    zlib
    fontconfig
    freetype
    libGL
    sdl3
    vulkan-loader
    libX11
    libXext
    libXcursor
    libXi
    libXrandr
    libICE
    libSM
    mono
    libdeflate
    libargon2
  ];
  programs.steam.enable = true;
  programs.fish.enable = true;
  programs.niri.enable = true;
  programs.dms-shell = {
    enable = true;
    systemd.enable = true;
    enableSystemMonitoring = true;
    enableDynamicTheming = true;
    enableAudioWavelength = true;
    enableClipboardPaste = true;
  };
  services.displayManager.dms-greeter = {
    enable = true;
    compositor.name = "niri";
  };
  systemd.user.services.xwayland-satellite = {
    description = "Xwayland outside your Wayland compositor";
    wantedBy = [ "graphical-session.target" ];
    partOf = [ "graphical-session.target" ];
    serviceConfig = {
      ExecStart = "${pkgs.xwayland-satellite}/bin/xwayland-satellite";
      Restart = "on-failure";
    };
  };
  fonts.packages = with pkgs; [
    nerd-fonts.jetbrains-mono
    nerd-fonts.fira-code
    nerd-fonts.meslo-lg
  ];
  fonts.fontconfig = {
    defaultFonts = {
      monospace = [ "JetBrainsMono Nerd Font" ];
      sansSerif = [ "DejaVu Sans" ];
    };
  };
  nix.gc = {
    automatic = true;
    dates = "weekly";
    options = "--delete-older-than 7d";
  };
  nix.settings.auto-optimise-store = true;
  services.avahi = {
    enable = true;
    nssmdns4 = true;
    openFirewall = true;
  };
  services.blueman.enable = true;
  services.keyd = {
    enable = true;
    keyboards = {
      default = {
        ids = [ "*" ];
        settings = {
          main = {
            capslock = "~";
          };
          shift = {
            capslock = "`";
            left = "home";
            right = "end";
          };
        };
      };
    };
  };
  # Enable the OpenSSH daemon.
  # services.openssh.enable = true;
  # Open ports in the firewall.
  # networking.firewall.allowedTCPPorts = [ ... ];
  # networking.firewall.allowedUDPPorts = [ ... ];
  # Or disable the firewall altogether.
  # networking.firewall.enable = false;
  system.stateVersion = "25.11"; # Did you read the comment?
}