(use-modules (gnu)
	     (guix transformations)
	     (gnu home)
             (guix gexp)
 	     (nongnu packages linux)
	     (nongnu system linux-initrd)
             (gnu home services shells))

(use-service-modules guix cups desktop networking ssh xorg docker nix admin vnc lightdm syncthing virtualization databases linux web backup telephony file-sharing)
(use-package-modules gnome xdisorg vnc databases)

(load "/home/w96k/projects/dotfiles/guix/.dotfiles/home-configuration.scm")

(define wkz-transform
  ;; The package transformation procedure.
  (options->transformation
   '((tune . "skylake"))))

(operating-system
 (locale "en_US.utf8")
 (timezone "Asia/Tbilisi")
 (kernel linux)
 (kernel-arguments '("video=HDMI-A-1:1920x1080@240"))
 (initrd microcode-initrd)
 (firmware (list linux-firmware))
 (keyboard-layout (keyboard-layout "us,ru"
                                   #:options '("grp:shifts_toggle" "ctrl:nocaps")))
 (host-name "wkz-guix")

 ;; The list of user accounts ('root' is implicit).
 (users (cons* (user-account
                (name "w96k")
                (comment "W96K")
                (group "users")
                (home-directory "/home/w96k")
                (supplementary-groups '("wheel" "netdev" "audio" "video" "kvm" "httpd")))
               %base-user-accounts))

 ;; (packages %base-packages)
 (packages
  (append
   (map
    specification->package
    '(
      "font-gnu-freefont" "font-gnu-unifont"
      ))
   %base-packages))

 ;; Below is the list of system services.  To search for available
 ;; services, run 'guix system search KEYWORD' in a terminal.
 (services
  (append (list
	   (service guix-home-service-type `(("w96k" ,wkz-home)))
	   (service block-facebook-hosts-service-type)

	   (service zram-device-service-type
                            (zram-device-configuration
                              (compression-algorithm 'zlib)
                              (priority 100)))

	   (service tor-service-type
		    (tor-configuration
                     (config-file (plain-file "tor-config"
                                              "HTTPTunnelPort 127.0.0.1:9250"))))
	   (service openssh-service-type)

	   (service transmission-daemon-service-type)
	   
	   ;; (service containerd-service-type)
	   ;; (service docker-service-type)
	   ;; (service restic-backup-service-type)
	   
	   ;; (service hurd-vm-service-type
           ;;   (hurd-vm-configuration
           ;;    (disk-size (* 5000 (expt 2 20))) ;5G
           ;;    (memory-size 1024)))
	   
	   ;; (service nix-service-type)

	   ;; (service xvnc-service-type (xvnc-configuration
           ;;                             (display-number 10)
           ;;                             (localhost? #f)
           ;;                             (geometry "1280x800")))

	   ;; (service syncthing-service-type
	   ;; 	    (syncthing-configuration
	   ;; 	     (user "w96k")))

	   ;; (service postgresql-service-type
	   ;; 	    (postgresql-configuration
	   ;; 	     (postgresql postgresql-15)))

	   (service dhcp-client-service-type)

	   (service httpd-service-type
		    (httpd-configuration
		     (config
		      (httpd-config-file
		       (modules (cons*
				 (httpd-module
				  (name "proxy_module")
				  (file "modules/mod_proxy.so"))
				 (httpd-module
				  (name "proxy_fcgi_module")
				  (file "modules/mod_proxy_fcgi.so"))
				 %default-httpd-modules))
		       (extra-config (list "\
<FilesMatch \\.php$>
    SetHandler \"proxy:unix:/var/run/php-fpm.sock|fcgi://localhost/\"
</FilesMatch>"))))))
	   (service php-fpm-service-type
		    (php-fpm-configuration
		     (display-errors #t)
		     (socket "/var/run/php-fpm.sock")
		     (socket-group "httpd")))

	   ;; (service screen-locker-service-type
           ;;  (screen-locker-configuration
           ;;   (name "xlock")
           ;;   (program (file-append xlockmore "/bin/xlock"))))
	   )

	  (modify-services %desktop-services
			   (delete screen-locker-service-type)
			   (delete modem-manager-service-type)
			   ;; (delete udisks-service-type)
			   (delete upower-service-type)
			   (delete network-manager-service-type)
			   (delete wpa-supplicant-service-type)
			   ;; (delete usb-modeswitch-service-type)
			   (delete geoclue-service-type)
			   ;;(delete elogind-service-type)
			   (delete colord-service-type)
			   (delete ntp-service-type)
			   
			   
			   (guix-service-type config => (guix-configuration
							 (inherit config)
							                                  ;; Rely on btrfs compression.
							 (log-compression 'none)
							 (extra-options '("--max-jobs=10"))
							 (substitute-urls
							  (list
							   "https://4zwzi66wwdaalbhgnix55ea3ab4pvvw66ll2ow53kjub6se4q2bclcyd.onion"
							   "https://substitutes.nonguix.org"))
							 (http-proxy "http://localhost:9250")
							 (authorized-keys
							  (append (list (plain-file "non-guix.pub"
										    "
(public-key 
 (ecc 
  (curve Ed25519)
  (q #C1FD53E5D4CE971933EC50C9F307AE2171A2D3B52C804642A7A35F84F3A4EA98#)
  )
 )
"))
								  %default-authorized-guix-keys))))
			   
			   (delete gdm-service-type))))

  (mapped-devices (list (mapped-device
                          (source (uuid
                                   "03db8d78-051b-4a11-a7e5-b62ae0f530d4"))
                          (target "cryptroot")
                          (type luks-device-mapping))))

  ;; The list of file systems that get "mounted".  The unique
  ;; file system identifiers there ("UUIDs") can be obtained
  ;; by running 'blkid' in a terminal.
  (file-systems (cons* (file-system
                         (mount-point "/")
                         (device "/dev/mapper/cryptroot")
                         (type "btrfs")
			 (options "compress=zlib:9,autodefrag")
                         (dependencies mapped-devices))
		       (file-system
                         (mount-point "/home/w96k/")
                         (device "/dev/mapper/cryptroot")
                         (type "btrfs")
			 (options "compress=zlib:7,autodefrag,subvol=/home/w96k/")
                         (dependencies mapped-devices))
		       (file-system
                         (mount-point "/home/w96k/Snapshots/")
                         (device "/dev/mapper/cryptroot")
                         (type "btrfs")
			 (options "compress=zlib:9,autodefrag,subvol=/home/w96k/Snapshots")
                         (dependencies mapped-devices))
                       (file-system
                         (mount-point "/boot/efi")
                         (device (uuid "6ECD-551F"
                                       'fat32))
                         (type "vfat")) %base-file-systems))
 
 (bootloader (bootloader-configuration
              (bootloader grub-efi-bootloader)
              (targets (list "/boot/efi"))
              (keyboard-layout keyboard-layout))))