nix-config/hosts/franz/default.nix

{
  inputs,
  outputs,
  lib,
  config,
  pkgs,
  ...
}: let
  vars = import ../../vars.nix;
in {
  imports = [
    inputs.hardware.nixosModules.common-pc-ssd
    inputs.disko.nixosModules.default

    ./hardware-configuration.nix
    (import ../../disko/btrfs-swap.nix {device = "/dev/nvme0n1";})

    ../common/global

    ../common/optional/systemd-boot.nix
    ../common/optional/gnome-keyring.nix
    ../common/optional/docker.nix
    ../common/optional/vsftpd.nix
    ./sops.nix
    ./arion
  ];

  users.mutableUsers = true;
  users.users.${vars.user} = {
    password = "changeme";
    openssh.authorizedKeys.keys = [
      #Desktop
      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJd6Gut34abkwlZ4tZVBO4Qt7CkIpPm/Z8R6JCisjnYy openpgp:0xBD0CFCA0"

      #Convertible
      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFlRsnLqm6Ap3yKEEhtFiWavo72df/X5Il1ZCmENUqev openpgp:0xDE189CA5"
    ];
  };
  security.pam.enableSSHAgentAuth = true;

  fileSystems."/drives/hdd" = {
    device = "/dev/disk/by-uuid/7d5eaff7-c17d-4fac-b7d7-7aa3c35b9a29";
  };

  nixpkgs = {
    overlays = [
      outputs.overlays.additions
      outputs.overlays.modifications
      outputs.overlays.unstable-packages
    ];
    config = {
      allowUnfree = true;
    };
  };

  networking.hostName = "franz";

  programs = {
    dconf.enable = true;
  };

  services.openssh = {
    enable = true;
    settings.PasswordAuthentication = false;
    settings.KbdInteractiveAuthentication = false;
  };

  # https://nixos.wiki/wiki/FAQ/When_do_I_update_stateVersion
  system.stateVersion = "23.11";
}