niksos/hosts/chmura/configuration.nix

{
  config,
  pkgs,
  inputs,
  ...
}: {
  # fuck broadcom
  nixpkgs.config.allowUnfree = true;

  # Use the systemd-boot EFI boot loader.
  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;

  time.timeZone = "Europe/Warsaw";

  nix.settings = {
    experimental-features = [
      "flakes"
      "nix-command"
    ];
  };

  programs.zsh = {
    enable = true;
    shellAliases = {
      cl = "clear";
      cp = "cp -ivr";
      mv = "mv -iv";
      rm = "trash -v";
      l = "ls -A --color=auto";
      e = "exa -lha --git";
      v = "nvim";
      kys = "shutdown now";
      g = "git";
    };
    initExtra = ''
      bindkey '^H' backward-kill-word
    '';
    history = {
      path = "${config.xdg.dataHome}/zsh/zsh_history";
      size = 999999999;
      extended = true;
      ignoreSpace = true;
    };
    enableAutosuggestions = true;
    enableCompletion = true;
    autocd = false;
    dotDir = ".config/zsh";
    plugins = [
      {
        name = "fast-syntax-highlighting";
        file = "fast-syntax-highlighting.plugin.zsh";
        src = pkgs.fetchFromGitHub {
          owner = "zdharma-continuum";
          repo = "fast-syntax-highlighting";
          rev = "cf318e06a9b7c9f2219d78f41b46fa6e06011fd9";
          sha256 = "sha256-RVX9ZSzjBW3LpFs2W86lKI6vtcvDWP6EPxzeTcRZua4=";
        };
      }
    ];
  };

  users.users.chmura = {
    isNormalUser = true;
    extraGroups = ["wheel"];
    shell = pkgs.zsh;
    packages = with pkgs; [
        curl
        neovim
        neofetch
        git
        wireguard-tools
        ntfy
    ];
  };

  environment = {
    shells = with pkgs; [zsh];
    pathsToLink = [ "/share/zsh" ];
    sessionVariables = {
      EDITOR = "nvim";
    };
  };

  services.openssh = {
    enable = true;
    settings.PasswordAuthentication = true;
  };

  services.caddy = {
    enable = true;
    virtualHosts."trollface.pl".extraConfig = ''
      reverse_proxy * /home/chmura/trollface
    '';
  };

  networking.firewall.allowedTCPPorts = [ 80 443 22 ];

  system.stateVersion = "23.11";
}