{ config, pkgs, ... }:

{
  imports =
    [
      ./hardware-configuration.nix
    ];

  boot.loader.efi.efiSysMountPoint = "/boot";
  boot.loader.efi.canTouchEfiVariables = true;
  boot.loader.grub = {
    enable = true;
    device = "nodev";
    version = 2;
    efiSupport = true;
    enableCryptodisk = true;
  };

  boot.initrd.luks.devices."cryptlvm".device = "/dev/disk/by-uuid/a7343776-004e-4e5d-9603-e0e3f02046f6";

  time.timeZone = "America/Phoenix";

  # The global useDHCP flag is deprecated, therefore explicitly set to false here.
  # Per-interface useDHCP will be mandatory in the future, so this generated config
  # replicates the default behaviour.
  networking.useDHCP = false;
  networking.interfaces.enp4s0.useDHCP = true;
  networking.interfaces.wlp2s0.useDHCP = true;

  nix = {
    package = pkgs.nixUnstable;
    extraOptions = ''
      experimental-features = nix-command flakes
    '';
  };

  i18n.defaultLocale = "en_US.UTF-8";
  console = {
    font = "Lat2-Terminus16";
    keyMap = "us";
  };

  services.xserver.enable = true;

  services.xserver.displayManager.gdm.enable = true;
  services.xserver.desktopManager.gnome.enable = true;

  services.borgbackup.jobs.backupToArtemislenaEu = {
    paths = "/home/rocky/Documents/ /home/rocky/Projects/ /home/rocky/Pictures/";
    environment.BORG_RSH = "ssh -i /home/rocky/.ssh/id_ed25519";
    encryption.mode = "repokey";
    encryption.passphrase = import ./sensitive.nix;
    repo = "ssh://rocky_fuchsian_frog@artemislena.eu:backups";
    startAt = "daily";
  };

  services.borgbackup.jobs.backupToBorgBase = {
    paths = "/home/rocky/Documents/ /home/rocky/Projects/ /home/rocky/Pictures/";
    environment.BORG_RSH = "ssh -i /home/rocky/.ssh/id_ed25519";
    encryption.mode = "repokey";
    encryption.passphrase = import ./sensitive.nix;
    repo = "ssh://nxb1p2a5@nxb1p2a5.repo.borgbase.com:repo";
    startAt = "daily";
  };

  users.users.rocky = {
    isNormalUser = true;
    extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user.
  };

  networking.firewall.enable = false;

  system.stateVersion = "21.05"; # Did you read the comment?
}