{ config, pkgs, lib, ... }:

{
  imports =
    [
      ../../base.nix
      ./hardware-configuration.nix

      ./desktop.nix
  ];

  networking = {
    networkmanager.enable = true;
    wireguard.enable = true;

    tempAddresses = "disabled";
    hostName = "fa-t14-2025";
    nameservers = [ "9.9.9.9" ];
    domain = "it.hime.no";
    hostId = "f458d6aa";

    search = [
      "mktv.no"
      "mktv.local"
    ];
  };

  services.openssh.openFirewall = false;

  environment.systemPackages = with pkgs; [
    inetutils
    wireguard-tools
  ];

  virtualisation.docker = {
    enable = true;
    rootless = {
      enable = true;
      setSocketVariable = true;
    };
  };

  users.users.felixalb = {
    uid = 1000;
    openssh.authorizedKeys.keys = [ ];
    extraGroups = [ "networkmanager" ];
  };

  console.keyMap = "no";

  nixpkgs.config = {
    allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) [
      "securecrt"
      "securefx"
    ];
  };

  system.stateVersion = "25.05";
}