{ config, lib, pkgs, ... }:

{
  imports =
    [ 
      ./hardware-configuration.nix
      ./modules/generic.nix
      ./modules/physical.nix
      ./modules/borg-serve.nix
      ./modules/jellyfin.nix
      ./modules/arrstack
      ./modules/authentik-proxy.nix
      ./modules/stash.nix
      #./modules/nextcloud-aio.nix
      ./samba.nix
      ./modules/navidrome.nix
      ./modules/feishin.nix
      ./modules/tvproxy.nix
      #./modules/calibre-web.nix
      ./modules/borg.nix
      ./modules/nctest.nix
      ./modules/encode
      ./modules/lancache.nix
    ];

  system.autoUpgrade = {
    allowReboot = false;
  };

  sops.secrets."authentik/proxy/nasty" = {};
  services.authentik-proxy.token = builtins.readFile config.sops.secrets."authentik/proxy/nasty".path;

  services.nginx.defaultListen = [ { addr = "192.168.178.2"; } ]; # to not occupy the port for the lancache ip

  environment.systemPackages = with pkgs; [
    mediainfo
    mergerfs
    mergerfs-tools
    filezilla
    firefox
    ffmpeg_7-full
    _7zz
  ];

  programs.fuse.userAllowOther = true;

  users.users.mc-fucker.extraGroups = [ "render" ];

  zramSwap.memoryPercent = 100;

  programs.atop.netatop.enable = false;
  programs.java.enable = true;

  services.xserver = {
    enable = true;
    desktopManager = {
      xterm.enable = false;
      xfce.enable = true;
    };
  };

  services.xrdp = {
    enable = true;
    defaultWindowManager = "xfce4-session";
  };

  #system.stateVersion = "24.11";

}
# vim: set et ts=2 sw=2 ai: