Chickadee/hosts/laptop/default.nix

{ config, pkgs, ... }:

{
  imports = [
    ./hardware-configuration.nix

    ../../lilac.nix
  ];

  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;

  nix.settings.experimental-features = [ "nix-command" "flakes" ];

  networking.hostName = "laptop";
  networking.networkmanager.enable = true;

  time.timeZone = "America/Toronto";
  i18n.defaultLocale = "en_US.UTF-8";
  i18n.extraLocaleSettings = {
    LC_ADDRESS = "en_US.UTF-8";
    LC_IDENTIFICATION = "en_US.UTF-8";
    LC_MEASUREMENT = "en_US.UTF-8";
    LC_MONETARY = "en_US.UTF-8";
    LC_NAME = "en_US.UTF-8";
    LC_NUMERIC = "en_US.UTF-8";
    LC_PAPER = "en_US.UTF-8";
    LC_TELEPHONE = "en_US.UTF-8";
    LC_TIME = "en_US.UTF-8";
  };

  services.xserver.enable = true;
  services.displayManager.sddm.enable = true;
  services.desktopManager.plasma6.enable = true;
  services.xserver.xkb = {
    layout = "us";
    variant = "";
  };

  services.pulseaudio.enable = false;
  security.rtkit.enable = true;
  services.pipewire = {
    enable = true;
    alsa.enable = true;
    alsa.support32Bit = true;
    pulse.enable = true;
  };

  hardware.graphics.enable = true;
  hardware.graphics.enable32Bit = true;
  hardware.enableRedistributableFirmware = true;

  environment.systemPackages = with pkgs; [
    mullvad-browser
    signal-desktop
    discord
    protonmail-desktop
    steam
    obsidian
  ];

  networking = {
    firewall = {
      enable = true;
      allowedUDPPorts = [ 51820 ];
      trustedInterfaces = [ "wg0" ];
    };

    wireguard.interfaces."wg0" = {
      ips = [ "10.0.0.1/24" ];
      generatePrivateKeyFile = true;
      privateKeyFile = "/var/lib/wireguard/wg0.key";
      peers = [{
        publicKey = "Tst6SiqoGLSoOAF9l5vT2vvR2RGJ/mFcoBL3BL5n90k=";
        allowedIPs = [ "10.0.0.0/24" ];
        endpoint = "216.128.177.13:51820";
        persistentKeepalive = 25;
      }];
    };
  };

  services.openssh.enable = true;

  nixpkgs.config.allowUnfree = true;
  system.stateVersion = "26.05";
}