{ config, lib, pkgs, ... }:

{
  nix = {
    optimise = {
      automatic = true;
    };
    settings = {
      auto-optimise-store = true;
      experimental-features = [ "nix-command" "flakes" ];
    };
    gc = {
      automatic = true;
      options = "--delete-older-than 7d";
    };
  };

  boot = {
    loader = {
      systemd-boot.enable = true;
      efi.canTouchEfiVariables = true;
    };
    kernelPackages = pkgs.linuxPackages_latest;
  };

  networking = {
    search = [ "xengi.de" ];
    useNetworkd = true;
    nftables.enable = true;
    dhcpcd.enable = false;
    useDHCP = false;
    nameservers = [
      "2606:4700:4700::1111#one.one.one.one"
      "2620:fe::fe#dns.quad9.net"
    ];
    firewall.enable = true;
  };

  services.resolved = {
    enable = true;
    fallbackDns = [
      "1.1.1.1#one.one.one.one"
      "9.9.9.9#dns.quad9.net"
    ];
    llmnr = "false";
    extraConfig = ''
      MulticastDNS=false
    '';
    dnssec = "allow-downgrade";
    dnsovertls = "true"; #"opportunistic";
  };

  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";

  time.timeZone = "Europe/Berlin";

  console = {
    font = "Lat2-Terminus16";
    useXkbConfig= true;
  };

<<<<<<< HEAD
  users.users.root.openssh.authorizedKeys.keys = [
    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICW1+Ml8R9x1LCJaZ8bIZ1qIV4HCuZ6x7DziFW+0Nn5T xengi@kanae_2022-12-09"
    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICmb+mJfo84IagUaRoDEqY9ROjjQUOQ7tMclpN6NDPrX xengi@kota_2022-01-16"
    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICyklb7dvEHH0VBEMmTUQFKHN6ekBQqkDKj09+EilUIQ xengi@lucy_2018-09-08"
    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICjv9W8WXq9QGkgmANNPQR24/I1Pm1ghxNIHftEI+jlZ xengi@mayu_2021-06-11"
    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGhyfD+8jMl6FDSADb11sfAsJk0KNoVzjjiDRZjUOtmf xengi@nana_2019-08-16"
    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMPtGqhV7io3mhIoZho4Yf7eCo0sUZvjT2NziM2PkXSo xengi@nyu_2017-10-11"
  ];

  environment.systemPackages = with pkgs; [
    git
    vim
  ];

  programs = {
    vim = {
      enable = true;
      defaultEditor = true;
    };
    mtr.enable = true;
    htop = {
      enable = true;
      settings = {
        highlight_base_name = true;
        show_cpu_frequency = true;
        show_cpu_temperature = true;
        update_process_names = true;
        color_scheme = "6";
      };
    };
    tmux = {
      enable = true;
      terminal = "screen-256color";
      shortcut = "a";
      plugins = with pkgs.tmuxPlugins; [ sensible ];
      newSession = true;
      historyLimit = 10000;
      clock24 = true;
    };
  };

  security.sudo.execWheelOnly = true;

  system.stateVersion = "26.05";
}