{ config, pkgs, lib, ... }:

{
  imports =
    [
      ./packages/vim.nix
      ./users/Rory.nix
    ];
  boot.kernelParams = [ 
    "memory_hotplug.memmap_on_memory=1"
    "memhp_default_state=online"
    "net.core.default_qdisc=fq"
    "net.ipv4.tcp_congestion_control=bbr"
  ];
  networking = {
    hostName = lib.mkDefault "Rory-nix-base";
    firewall = {
      enable = false;
      # allowedTCPPorts = [ ... ];
      # allowedUDPPorts = [ ... ];
    };
  };

  #time.timeZone = "Europe/Brussels";
  i18n.defaultLocale = "en_US.UTF-8";

  services = {
    openssh = {
      enable = true;
      #allow more logins in cases where i have many ssh keys on a system
      extraConfig = ''
        MaxAuthTries 32
        '';
    };	
  };


  systemd = {
    sleep.extraConfig = ''
      AllowSuspend=no
      AllowHibernation=no
      '';
  };

  environment.systemPackages = with pkgs; [
    wget
    neofetch
    lnav
    zsh
    git
    lsd
    htop
    btop
    #sshfs
    duf
    kitty.terminfo
    neovim
#    vimPlugins.vim-nix
    tmux
    jq
    yq
    pv
    dig
    cloud-utils
  ];

  systemd.coredump.extraConfig = lib.mkDefault ''
    Storage=none
  '';
  nix.settings.trusted-substituters = [
    "https://nix-community.cachix.org"
    "https://cache.garnix.io"
    "https://numtide.cachix.org"
  ];
  nix.settings.trusted-public-keys = [
    "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
    "cache.garnix.io:CTFPyKSLcx5RMJKfLo5EEPUObbA78b0YQ2DTCJXqr9g="
    "numtide.cachix.org-1:2ps1kLBUWjxIneOy1Ik6cQjb41X0iXVXeHigGmycPPE="
  ];
  nix.settings.experimental-features = [ "nix-command" "flakes" ];
  nixpkgs.config.allowUnfree = true;
  security.sudo.wheelNeedsPassword = false;
  security.polkit.enable = true;
  system.stateVersion = "22.11"; # DO NOT EDIT!
}