Chickadee/hosts/laptop.nix

{ config, lib, pkgs, ... }:

{
  imports = [
    ../modules/desktop.nix
    ../lilac.nix
  ];

  environment.systemPackages = with pkgs; [
    mullvad-browser
    signal-desktop
    discord
    protonmail-desktop
    steam
    obsidian
  ];

  networking = {
    hostName = "laptop";
    networkmanager.enable = true;
    
    firewall = {
      enable = true;
      allowedUDPPorts = [ 51820 ];
      trustedInterfaces = [ "wg0" ];
    };

    wireguard.interfaces."wg0" = {
      ips = [ "10.0.0.1/32" ];
      generatePrivateKeyFile = true;
      privateKeyFile = "/var/lib/wireguard/wg0.key";
      peers = [{
        publicKey = "Tst6SiqoGLSoOAF9l5vT2vvR2RGJ/mFcoBL3BL5n90k=";
        allowedIPs = [ "10.0.0.0/24" ];
        endpoint = "216.128.177.13:51820";
        persistentKeepalive = 25;
      }];
    };
  };

  time.timeZone = "America/Toronto";
  services.openssh.enable = true;
  hardware.graphics.enable = true;
  hardware.graphics.enable32Bit = true;
  hardware.enableRedistributableFirmware = true;

  nix.settings.experimental-features = [ "nix-command" "flakes" ];
  nixpkgs.config.allowUnfree = true;
  system.stateVersion = "26.05";

  boot.initrd.availableKernelModules = [ "nvme" "xhci_pci" "thunderbolt" "usb_storage" "sd_mod" ];
  boot.initrd.kernelModules = [ ];
  boot.kernelModules = [ "kvm-amd" ];
  boot.extraModulePackages = [ ];
  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;

  fileSystems."/" = {
    device = "/dev/disk/by-uuid/379e6dd2-af45-4abc-8ff0-802791f76636";
    fsType = "ext4";
  };
  fileSystems."/boot" = {
    device = "/dev/disk/by-uuid/D852-8C36";
    fsType = "vfat";
    options = [ "fmask=0077" "dmask=0077" ];
  };
  swapDevices = [ ];

  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
  hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
}