# The desktop: ASUS TUF B850-PLUS, Ryzen 7 9850X3D, RTX 3080 Ti.
{ inputs, ... }:
let
  # The MacBook's public SSH key (its ~/.ssh/id_ed25519.pub), see below.
  macKeys = [
    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEn6xiiRol1fdQzd/2GFkkhZVpkqT9/cTCqhfchJJth9"
  ];
in
{
  imports = [
    ./hardware-configuration.nix
    ./disko.nix
    inputs.disko.nixosModules.disko
    ../../modules/nixos
    inputs.home-manager.nixosModules.home-manager
  ];

  networking.hostName = "desktop";

  # The wired port has a fixed address, set by systemd-networkd rather than
  # handed out by the router. NetworkManager keeps Wi-Fi and leaves eno1 alone.
  networking.networkmanager.unmanaged = [ "eno1" ];
  systemd.network = {
    enable = true;
    networks."10-eno1" = {
      matchConfig.Name = "eno1";
      address = [ "10.0.0.40/24" ];
      gateway = [ "10.0.0.1" ];
      dns = [ "10.0.0.1" ];
      domains = [ "granstrm.com" ];
    };
  };

  # The MacBook, which installs this machine with nixos-anywhere and can log in
  # before the home folder (and its ~/.ssh/authorized_keys) is restored. Root
  # too: a fresh install has no passwords, so that is how yours gets set.
  users.users.vizie.openssh.authorizedKeys.keys = macKeys;
  users.users.root.openssh.authorizedKeys.keys = macKeys;

  home-manager = {
    useGlobalPkgs = true;
    useUserPackages = true;
    extraSpecialArgs = { inherit inputs; };
    # A file already in the way of one Home Manager wants to place is moved
    # aside with this suffix rather than overwritten.
    backupFileExtension = "pre-nixos";
    users.vizie = import ../../modules/home;
  };

  # Leave this at the release the machine was installed with, even after
  # upgrading: it only controls the defaults of stateful things such as
  # database formats. It is not the NixOS version you run.
  system.stateVersion = "26.05";
}