{ config, pkgs, ... }:

{ imports = [
    ./hardware-configuration.nix
    <nixos-hardware/common/pc/ssd>
    <nixos-hardware/common/cpu/intel>

    ./settings/satoshipay.nix
    ./settings/base.nix
    ./settings/configuration/berlin.nix
    ./settings/configuration/british-english.nix
    ./settings/configuration/nix.nix
    ./settings/configuration/user.nix
    ./settings/hardware/audio.nix
    ./settings/hardware/bare-metal.nix
    ./settings/hardware/mouse.nix
    ./settings/hardware/grub2.nix
    ./settings/hardware/nvidia-gpu.nix
    ./settings/hardware/keyboard.nix
    ./settings/hardware/trackball.nix
    ./settings/hardware/trezor.nix
    ./settings/services/syncthing.nix
    ./settings/services/zeroconf.nix
    ./settings/user-interface.nix
    ./settings/programs/gnupg.nix
    ./settings/programs/i3.nix
    ./settings/programs/shell.nix
    ./settings/gaming.nix
    ./settings/programs/tor.nix
    ./settings/programs/barrier.nix
  ];
  services.xserver.screenSection = ''
    Option "MetaModes" "2560x1440_120 +0+0 { ForceFullCompositionPipeline = On }"
    Option "AllowIndirectGLXProtocol" "off"
    Option "TripleBuffer" "on"
  '';
  boot.loader.timeout = 3;
  boot.loader.grub.default = 2; # Default to Windows

  fileSystems."/data" = {
    label = "Data";
    fsType = "ntfs";
    options = ["rw" "uid=1000"];
  };
  fileSystems."/windows" = {
    label = "Windows";
    fsType = "ntfs";
    options = ["rw" "uid=1000"];
  };

  services.xserver = {
    xautolock.enable = pkgs.lib.mkForce false;
  };
  services.postgresql = {
    enableTCPIP = true;
    authentication = ''
      # TYPE  DATABASE        USER            ADDRESS                 METHOD
      host    all             all             samenet                 md5
    '';
  };
  networking.firewall.allowedTCPPorts = [ config.services.postgresql.port ];

  networking.firewall.extraCommands = ''
    iptables  -A nixos-fw -p udp --source 172.30.44.0/24        -j nixos-fw-accept
    iptables  -A nixos-fw -p tcp --source 172.30.44.0/24        -j nixos-fw-accept
    ip6tables -A nixos-fw -p tcp --source fdbf:4d14:b5de:0::/64 -j nixos-fw-accept
    ip6tables -A nixos-fw -p udp --source fdbf:4d14:b5de:0::/64 -j nixos-fw-accept
  '';

  services.samba = {
    enable = true;
    shares = {
      Music = {
        path = "/data/Home/Music/";
        browseable = true;
        "guest ok" = true;
      };
      Videos = {
        path = "/data/Home/Videos/";
        browseable = true;
        "guest ok" = true;
      };
    };
    extraConfig = ''
      hide files = desktop.ini
    '';
  };

  powerManagement.enable = false;
  powerManagement.cpuFreqGovernor = "performance";
  networking = {
    hostName = "prefect";
  };

  system.stateVersion = "20.09";
}