{ config, pkgs, ... }:

{
  # allow flakes
  nix.settings.experimental-features = [ "nix-command" "flakes" ];

  # hostname
  networking.hostName = config.hostName;

  # common system packages
  environment.systemPackages = with pkgs; [
    # editor
    vim
    # lib
    libz
    openssl
    shared-mime-info
    # shell
    bash
    zsh
    # utility
    acpi
    alsa-utils
    curl
    dig
    file
    fuse
    htop
    killall
    mlocate
    ntfs3g
    openssh
    p7zip
    ripgrep
    sbctl
    tree
    unzip
    wget
  ];

  # nix-ld
  programs.nix-ld.enable = true;

  # appimage
  programs.appimage = {
    enable = true;
    binfmt = true;
  };

  # use the latest kernel
  boot.kernelPackages = pkgs.linuxPackages_latest;

  # sysrq
  boot.kernel.sysctl."kernel.sysrq" = 246;

  # timezone
  time.timeZone = "America/New_York";

  # locale
  i18n.defaultLocale = "en_US.UTF-8";

  # services
  networking.networkmanager.enable = true;
  networking.networkmanager.dns = "systemd-resolved";
  networking.firewall.enable = false;
  services.fwupd.enable = true;
  services.libinput.enable = true;
  services.pipewire = {
    enable = true;
    alsa.enable = true;
    pulse.enable = true;
    jack.enable = true;
  };
  services.resolved.enable = true;

  # printing
  services.printing.enable = true;
  services.avahi = {
    enable = true;
    nssmdns4 = true;
    openFirewall = true;
  };

  # docker
  virtualisation.docker.enable = true;
  virtualisation.docker.storageDriver = "btrfs";

  # create user account
  users.users.${config.user} = {
    isNormalUser = true;
    description = config.fullName;
    extraGroups = [ "networkmanager" "wheel" "sys" "video" "audio" "docker" "libvirtd" ];
    home = config.homePath;
    shell = pkgs.zsh;
  };

  # certs
  security.pki.certificateFiles = [
    ../../files/certs/freyanet.crt
    ../../files/certs/tinternet.crt
  ];

  # mime
  environment.pathsToLink = [
    "/share/mime"
  ];

  # fonts
  fonts.packages = with pkgs; [
    corefonts
    dejavu_fonts
    fira-code
    fira-code-symbols
    jetbrains-mono
    material-icons
    nerd-fonts.fira-code
    noto-fonts
    noto-fonts-cjk-sans
    noto-fonts-emoji
    twemoji-color-font
    vistafonts
  ];

  fonts.fontconfig = {
    enable = true;
    defaultFonts = {
      serif = [
        "Twemoji"
        "DejaVu Serif"
      ];
      sansSerif = [
        "Twemoji"
        "DejaVu Sans"
      ];
      monospace = [
        "Fira Code"
        "FiraCode Nerd Font Mono"
        "Font Awesome 6 Pro Regular"
        "Twemoji"
        "DejaVu Sans Mono"
      ];
      emoji = [
        "Twemoji"
        "Noto Color Emoji"
      ];
    };
  };

  # vms
  programs.virt-manager.enable = true;
  users.groups.libvirtd.members = [config.user];
  virtualisation.libvirtd.enable = true;
  virtualisation.spiceUSBRedirection.enable = true;
}