{ config, pkgs, ... }:
{
imports =
        [ # Include the results of the hardware scan.
          ./hardware-configuration.nix
          ./taskd.nix
	  ./nextcloud.nix
	  ./networking.nix
#	  ./wireguard.nix
#	  ./shiori.nix
	  ./shaarli.nix
#	  ./shaarli-tokudan.nix
#	  ./mod-wallabag.nix
#	  ./pkg-wallabag.nix
	  ./navidrome.nix
	  ./pkg-navidrome.nix
#	  ./wallabag.nix
	  ./headphones.nix
	  ./dns.nix
	  ./backup.nix
	  ./monitoring.nix
        ];

                boot.loader.grub.devices = [ "/dev/sda" ];
                boot.loader.grub.enable = true;
                boot.loader.grub.version = 2;
                boot.loader.grub.enableCryptodisk = true;
                boot.loader.supportsInitrdSecrets = true;
        
                boot.initrd.kernelModules = [ "dm-snapshot" ];
                boot.initrd.availableKernelModules = ["virtio-pci"];
                boot.initrd.network = {
                  enable = true;
                  ssh = {
                    enable = true;
                    port = 2222;
                    authorizedKeys = ["ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKN8/SH55DBiwVoSnTU8k2Pen+wmovL9QaMyehxGEsJJv/8fzwsswGalD4C/4O51LOvdu4UKkZW5hG02uVSK+58p3UV3pOPyoqsu/aDeIsWsqmTeTzUrBIWOlNzcDKnohLz2oGC5YO+wyTJ9Iteq6aGJDjErsW7sG3h5lXCs551EmJNNGhtBQaaoytMNnWqSdlVjDNCijurH7WUpp40U/RjEp532l4rX6eIIj3jBKEFbhZkFSSjqbj4xM4SyFt+Jmigb1RMjsQjmpfY1vDtM84RcYfpTUte/T5w2dkD5H6kccmWnwKSJpm9wXfx4E7lR9APdUGnau2U1+XxiD3ytGl anish@box
"];
                    hostKeys = [ "/host_ecdsa_key" ];
                    };
                };
        
                boot.initrd.luks.devices = {
                  "enc-pv" = {
                    name = "enc-pv";
                    preLVM = true;
                    device = "/dev/disk/by-uuid/425cc402-9221-474f-aaf1-10ac7cd4c93c";
                    allowDiscards = true;
                  };
                };
        
                boot.initrd.secrets = {
                  "/host_ecdsa_key" = "/host_ecdsa_key";
                  };
        

        boot.cleanTmpDir = true;
        boot.kernelModules = [ "dm-snapshot" ];

	users.users.anish = {
		isNormalUser = true;
		extraGroups = [ "wheel" ];
		hashedPassword = "MO0Pbd2O4eIlA";
		openssh.authorizedKeys.keys = [ "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKN8/SH55DBiwVoSnTU8k2Pen+wmovL9QaMyehxGEsJJv/8fzwsswGalD4C/4O51LOvdu4UKkZW5hG02uVSK+58p3UV3pOPyoqsu/aDeIsWsqmTeTzUrBIWOlNzcDKnohLz2oGC5YO+wyTJ9Iteq6aGJDjErsW7sG3h5lXCs551EmJNNGhtBQaaoytMNnWqSdlVjDNCijurH7WUpp40U/RjEp532l4rX6eIIj3jBKEFbhZkFSSjqbj4xM4SyFt+Jmigb1RMjsQjmpfY1vDtM84RcYfpTUte/T5w2dkD5H6kccmWnwKSJpm9wXfx4E7lR9APdUGnau2U1+XxiD3ytGl anish@box ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDM8kTdMGGmr6mv/zv+K9qVjhzqwivyyN5IV04R7/kcWKw1c6ZEzzqqmsnJ/hci6IIxZ/VEUzMhYz0iBCL0wJHHMxYoNCgISWePtDlVJdyrzm9OWjJNcRStZBW3XcY9dELJsCVcQ4LAVYE4vA+MdmbwM2FZgJhAH6qUzujpfNrj/YIVG7MTN6tbUd63uZF57F43c8WUjgRJx2o7Wl9bSe6v3PZ4fAgEO+wQPso+W+pEXLZ3hBNrHdybwdoGvG9tHlBDbLid11BxtpzmwR9CydDfpbyOXB2+tJkkNXhsHB22mN/2+vGWYhDKYPTFqbDW7McDfQChySyYDdZWmg5WHIGz anish@curve" ];
	};

        users.users.root.initialHashedPassword = "";
        services.openssh.permitRootLogin = "prohibit-password";
        networking.hostName = "bowl";
        services.openssh.enable = true;
        services.logind.lidSwitch = "ignore";
	system.stateVersion = "20.09";
	time.timeZone = "Australia/Brisbane";
}