system.nix

{ config, pkgs, username, hostname, pkgs-stable, ... }:

let 
  inherit (import ./options.nix) 
    theLocale theTimezone gitUsername
    theShell theLCVariables theKBDLayout flakeDir
    httpProxy socksProxy firewallPorts useFirewall;
in {
  imports =
    [
      ./hardware.nix
      ./config/system
    ];
  
  # Enable networking
  networking.hostName = "${hostname}"; # Define your hostname
  networking.networkmanager.enable = true;
  networking.proxy.default = "${socksProxy}";
  networking.proxy.allProxy = "${socksProxy}";
  networking.proxy.rsyncProxy = "${socksProxy}";
  networking.proxy.httpProxy = "${httpProxy}";
  networking.proxy.httpsProxy = "${httpProxy}";
  networking.proxy.ftpProxy = "${httpProxy}";

  #systemd.globalEnvironment = {
  #  HTTP_PROXY="${httpProxy}";
  #  HTTPS_PROXY="${httpProxy}";
  #  ALL_PROXY="${socksProxy}";
  #  RSYNC_PROXY="${socksProxy}";
  #  FTP_PROXY="${socksProxy}";
  #};

  networking.extraHosts = ''
    165.22.52.204  simple-web.me
  '';

  #Firewall
  networking.firewall.enable = false;
  networking.firewall.allowedTCPPorts = if useFirewall == true 
  then firewallPorts
  else [];

  # Set your time zone
  time.timeZone = "${theTimezone}";

  # Select internationalisation properties
  i18n.defaultLocale = "${theLocale}";
  i18n.extraLocaleSettings = {
    LC_ADDRESS = "${theLCVariables}";
    LC_IDENTIFICATION = "${theLCVariables}";
    LC_MEASUREMENT = "${theLCVariables}";
    LC_MONETARY = "${theLCVariables}";
    LC_NAME = "${theLCVariables}";
    LC_NUMERIC = "${theLCVariables}";
    LC_PAPER = "${theLCVariables}";
    LC_TELEPHONE = "${theLCVariables}";
    LC_TIME = "${theLCVariables}";
  };
  console.keyMap = "${theKBDLayout}";

  # Define a user account.
  users = {
    mutableUsers = true;
    users."${username}" = {
      homeMode = "755";
      isNormalUser = true;
      description = "${gitUsername}";
      extraGroups = [ "networkmanager" "wheel" "libvirtd" "docker" "audio" "pulse-access" "qemu-libvirtd" "kvm" "wireshark" ];
      shell = pkgs.${theShell};
      ignoreShellProgramCheck = true;
      packages = (with pkgs; [ 
        networkmanager-fortisslvpn
	bun
	go-ethereum
	gcc
	openssl
	netcat
	gnupg
	railway
	ghidra
	jdk
	nmap
	gobuster
	metasploit
	dex2jar
	android-tools
	file
	tshark
	sshpass
	motrix
	inetutils
	netdiscover
	exiftool
	hexedit
	binwalk
	thc-hydra
	openfortivpn
	dig
	stunnel
	samba4Full
	enum4linux-ng
	openvpn
	zip
	steghide
	mangohud
	lutris
	protonup-qt
	wine64
	wineWowPackages.waylandFull
	winetricks
	wineWowPackages.stable
	tcptraceroute
	hyprpicker
	john
        dbeaver-bin
        android-studio
	zed-editor
        deno
	#USER_PKG
      ])

      ++

      (with pkgs-stable; [
        qbittorrent
        xz
        sysstat
        dmidecode
	textsnatcher
	hdparm
	nasm
	pwninit
	steam-run
	gef
	patchelf
	scrcpy
	sqlmap
	exploitdb
	apktool
	frida-tools
	virtiofsd
	spice-gtk
	cbonsai
	peaclock
        putty
        anydesk
	ntfs3g
	nixpkgs-fmt
	csvlens
	postman
	marktext
	cava	
	jadx
	qutebrowser-qt5
	#STABLE_USER
      ]);
    };
  };

  environment.variables = {
    FLAKE = "${flakeDir}";
    POLKIT_BIN = "${pkgs.polkit_gnome}/libexec/polkit-gnome-authentication-agent-1";
  };

  environment.systemPackages = (with pkgs; [
        #SYSTEM_PKG 
      ])
    
      ++

      (with pkgs-stable; [
        curl
        git
        pciutils
        wget
        file
        inetutils
        tcpdump
        parted
        pulseaudioFull
        pavucontrol
        pulseeffects-legacy
        alsa-utils
        htop
        btop
        libvirt
        polkit_gnome
        lm_sensors
        unzip
        unrar
        libnotify
        v4l-utils
        ydotool
        wl-clipboard
        socat
        lsd
        lshw
        pkg-config
        meson
        gnumake
        ninja
        go
        nodejs 
        brightnessctl
        toybox
        virt-viewer
        swappy
        ripgrep
        appimage-run 
        networkmanagerapplet
        yad
        playerctl
        nh
        fastfetch
        libcec
        zoxide
	#STABLE_SYSTEM
      ]);

  fonts = {
    enableDefaultPackages = true;
    packages = with pkgs; [
      ubuntu_font_family
      nerd-fonts.jetbrains-mono
      font-awesome
      noto-fonts-color-emoji
      material-icons
    ];
    fontDir = {
      enable = true;
    };
  };

  environment.shells = with pkgs; [ zsh ];
  environment.etc."ppp/options".text = "ipcp-accept-remote";

  virtualisation.docker.enable = true;
  virtualisation.virtualbox.host.enable = true;
  virtualisation.waydroid.enable = true;
 
  # Optimization settings and garbage collection automation
  nix = {
    settings = {
      auto-optimise-store = true;
      experimental-features = [ "nix-command" "flakes" ];
      substituters = ["https://hyprland.cachix.org"];
      trusted-public-keys = [
        "hyprland.cachix.org-1:a7pgxzMz7+chwVL3/pzj6jIBMioiJM7ypFP8PwtkuGc="
      ];
    };
    gc = {
      automatic = true;
      dates = "weekly";
      options = "--delete-older-than 7d";
    };
  };
  #nixpkgs.config.permittedInsecurePackages = [
  #  "nix-2.16.2"
  #  "python-2.7.18.7"
  #  "python"
  #];
  system.stateVersion = "23.11";
}