console.nix

{pkgs, lib, ...}:
let 
  colors = import ./colors.nix;
  networks = import ./networks.nix;
in {
  nixpkgs.config.allowBroken = true;
  # Use the systemd-boot EFI boot loader.
  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;
  #boot.kernelPackages = pkgs.linuxPackages_6_7;
  # TODO switch back later:
  #boot.kernelPackages = pkgs.linuxPackages_latest;
  # below won't boot :(
  #boot.kernelPackages = pkgs.linuxPackages-rt_latest;
  # why do these feel redundant?
  # see /etc/resolv.conf   [ cloudflare DNS     ,     Google DNS     ]
  networking.nameservers = [ "1.1.1.1" "1.0.0.1" "8.8.8.8" "8.8.4.4" ];
  # see networks.nix for wifi network configuration:
  networking.wireless.enable = true;  # Enables wpa_supplicant.
  # can I get this in my hardware-configuration.nix?
  /*networking.wireless.interfaces = [ "wlp0s20f3" 
                                     #"wlp3s0" 
    ]; # must tweak for multiple laptop installs (grep for wlp)
  */
  networking.wireless.networks = networks; 
  services.acpid.enable = true; # maybe need: services.acpid.acEventCommands -> ""
  # services.gvfs.enable = true; # use android devices MTP, dolphin apparently doesn't use?
  time.timeZone = "US/Eastern";

  networking.useDHCP = false; ## this is default on all of my systems.

  i18n.defaultLocale = "en_US.UTF-8";
  console = { # sets /etc/vconsole.conf
    # see `ls /etc/static/kbd/consolefonts/ | grep .psfu.gz` for fonts
    # samples: https://adeverteuil.github.io/linux-console-fonts-screenshots/
    font = "Lat2-Terminus16";
    # or maybe see kmscon? https://search.nixos.org/options?query=kmscon
    keyMap = "us";
    colors = with colors;
      [ black red green yellow blue magenta cyan white 
        brightblack brightred brightgreen brightyellow brightblue
        brightmagenta brightcyan brightwhite ];
  };

  # VM - grep for virt to find all relevant entries
  #virtualisation = {
    #qemu.drives = {
    #  nixosvm = {
    #    name = "nixosvm";
    #    # the file image used for this drive
    #    file = "nixos-minimal-23.11.4976.79baff8812a0-x86_64-linux.iso";
    #    driveExtraOpts = {}; # extra options passed to drive flag
    #    deviceExtraOpts = {}; # Extra options passed to device flag
    #  };
    #};
   # virtualbox.host = {
   #   enable = true;
   #   enableExtensionPack = true;
   # };
   # libvirtd.enable = true;
  #};

  users.extraGroups.bvoxusers.members = [ "aaron" ];
  # virtualisation.libvirtd.enable = true;# sudo virsh net-start default
  # users.users.user = { # for build-vm?
  #   group = [ "wheel" ];
  #   isSystemUser = true;
  #   initialPassword = "pw";
  # };

  # run the emacs server daemon so starting emacs (as a client) is super fast:
  services.emacs.enable = true;
  # services.emacs.package = pkgs.emacs29-pgtk; # alpha-background, finally
  # oh no, alpha-background seems broken again!
  services.emacs.package = (with pkgs; (
    (emacsPackagesFor emacs29-pgtk).emacsWithPackages (epkgs: with epkgs; [
        evil
        ess
        projectile
        neotree
        ob-rust
        ob-elm
        treesit-grammars.with-all-grammars
        company
        # company-stan
        company-math
        company-jedi
        company-ghci
        company-org-block
        company-c-headers
        company-nixos-options
        company-native-complete
        helm
        flycheck
        magit
        lsp-mode
        evil-markdown
        htmlize
        ox-reveal
        zotero
        fira-code-mode
        doom-themes
        doom-modeline
        adwaita-dark-theme
        gnuplot
        gnuplot-mode
        lsp-pyright
      ]
    )
  ));
  programs = {
    mtr.enable = true;
    tmux.enable = true;
  };
  # use neovim for lsp support
  programs.neovim = {
    enable = true;
    vimAlias = true;
    viAlias = true;
    defaultEditor = true;
    withNodeJs = true; # python3 true by default
    configure = {
      customRC = /* vimrc */ ''
        scriptencoding utf-8
        set encoding=utf-8
        syntax on
        filetype on
        set relativenumber
        set number
        set shiftwidth=4 expandtab
        autocmd BufRead,BufNewFile *.nix set shiftwidth=2
        set hidden
        set ruler
        set colorcolumn=80
        " view tabs and trailing spaces:
        set list
        set listchars=tab:»·,trail:·
        " below uses color 17 here: https://www.ditig.com/256-colors-cheat-sheet
        highlight ColorColumn ctermbg=NONE ctermfg=red 
        set backspace=indent,eol,start
        let g:elm_format_autosave = 1
        " https://shapeshed.com/vim-netrw/
        let g:netrw_banner=0
        let g:netrw_liststyle=3
        let g:netrw_browse_split=4
        let g:netrw_altv=1
        let g:netrw_winsize=25
        augroup ProjectDrawer
          autocmd!
          autocmd VimEnter * :Vexplore
        augroup END
        command! -nargs=0 Diff w !diff % -
        lua require('lspconfig').pyright.setup{}
      '';
      packages.myVimPackage = with pkgs.vimPlugins; {
        start = [
          #vim-lsp # need LSP now? 
          #YouCompleteMe elm-vim vim-nix haskell-vim 
          #jedi-vim typescript-vim rust-vim vim-polyglot
          nvim-treesitter.withAllGrammars
          coc-pyright # completion and uses typescript - Python
          nvim-lspconfig # spelling?
        ];
      };
    };
  };

  users.users.aaron = {
    isNormalUser = true;
    extraGroups = [ "wheel" "video" "audio" "libvirtd" ];
  };
  users.motd = ''
    Welcome to NixOS!
  '';
  environment.variables = {
    PROMPT_COMMAND = "history -a";
    EDITOR = "vim";
    # use the terminal colors we are defining in colors.nix:
    BAT_THEME = "ansi"; 
  };
  nix.settings = {
    extra-experimental-features = [ "nix-command" "flakes" ];
  };
  # Bash config:
  # https://www.gnu.org/software/bash/manual/bash.html
  programs.bash.promptInit = builtins.readFile ./prompt.sh;
  programs.bash.interactiveShellInit = /* bash */ ''
    mount_android () {
    mkdir -p ~/androidmount
    cat <<DOC
    attempt mtp mount creation with `jmtpfs ~/androidmount`
    Don't forget to give permission on device 
    and unmount_android when done.
    DOC
    jmtpfs ~/androidmount || cat <<ERR
    Error!
    Is the device connected?
    ERR
    }
    unmount_android () {
      fusermount -u ~/androidmount
    }
    ___mount_old_home () {  # avoid cluttering namespace, kinda defunct fn...
      sudo mount /dev/sdb5 /mnt 
      cd /mnt/home/.ecryptfs/excelsiora/ # needed else fails
      sudo ecryptfs-manager              # seems redundant but needed?
      sudo ecryptfs-recover-private --rw .Private/
      cd -  # go back to where we were
    }

    ___setup_watch_site() # see https://nixos.org/manual/nixos/unstable/index.html#sect-nixos-systemd-nixos
    {
      mkdir -p ~/.config/systemd/user/default.target.wants
      ln -s /run/current-system/sw/lib/systemd/user/site_check.service \
        ~/.config/systemd/user/default.target.wants/
      mkdir -p ~/.config/systemd/user/timers.target.wants
      ln -s /run/current-system/sw/lib/systemd/user/site_check.timer \
        ~/.config/systemd/user/timers.target.wants/
    }
    ___watch_site () {
      systemctl --user daemon-reload
      # systemctl --user enable site_check.service site_check.timer
      systemctl --user start site_check.timer site_check.service
    }
    ___watch_site_verify() {
      systemctl list-timers --user
    }
    ___follow_site_check_log() { journalctl --user -fu site_check ; }
    restart_wpa() { systemctl restart wpa_supplicant-wlp0s20f3.service ; }
    ___set_terminal_name() { printf '\033]0;%s\007' "$*" ; }
    fix_touchpad() { sudo modprobe -r psmouse && sudo modprobe psmouse ; }
    store_location () { readlink $(which $1) ; }

    display_colors () {
        # see https://www.man7.org/linux/man-pages/man5/terminal-colors.d.5.html
        for x in {0..8}; do
            for i in {30..37}; do
                for a in {40..47}; do
                    echo -ne "\e[$x;$i;$a""m\\\e[$x;$i;$a""m\e[0;37;40m "
                done
                echo
            done
        done
    echo ""
    }
    find_config () {
      grep -r $1 ~/config ;
    }
    find_file () {
      find . -type f -name "$1" ;
    }
    find_dir () {
      find . -type d -name "$1" ;
    }
    # PATH manipulation convenience functions:
    list_paths() {
      echo $PATH | tr : "\n" ; 
    }
    # These are from Linux From Scratch http://www.linuxfromscratch.org/blfs/view/6.3/postlfs/profile.html
    # Functions to help us manage paths.  Second argument is the name of the
    # path variable to be modified (default: PATH) $$'s are doubled up to escape from nix:
    pathremove () {
        local IFS=':'
        local NEWPATH
        local DIR
        local PATHVARIABLE=$${2:-PATH}
        for DIR in $${!PATHVARIABLE} ; do
            if [ "$DIR" != "$1" ] ; then
                NEWPATH=$${NEWPATH:+$$NEWPATH:}$$DIR
            fi
        done
        export $$PATHVARIABLE="$$NEWPATH"
    }
    pathprepend () {
        pathremove $$1 $$2
        local PATHVARIABLE=$${2:-PATH}
        export $$PATHVARIABLE="$$1$${!PATHVARIABLE:+:$${!PATHVARIABLE}}"
    }
    pathappend () {
        pathremove $$1 $$2
        local PATHVARIABLE=$${2:-PATH}
        export $$PATHVARIABLE="$${!PATHVARIABLE:+$${!PATHVARIABLE}:}$$1"
    }

    # Nix OS convenience functions:
    switch_old () { # usage: switch x1  *or* switch knode
      sudo nixos-rebuild switch -L --flake ~/config#$1 ;
    }
    switch () { # update and switch - this uses hostname for flake.
      nh os switch --update ~/config ;
    }
    build_old () {
      sudo nixos-rebuild build -L --flake ~/config#$1 ;
    }
    update () {
      echo "used to run 'nix flake update ~/config', now just 'switch'" ;
    }
    rollback () { #TODO find nh version of this?
      sudo nixos-rebuild --rollback switch ;
    }
    cleanup () {
      sudo nix-collect-garbage --delete-older-than 30d ;
    }
  '';
  # Firewall:
  networking.firewall.allowedTCPPorts = [ ];
  networking.firewall.allowedUDPPorts = [ ];

  # virtualisation.docker.enable = true;
  virtualisation.podman.enable = true;

 # services.ollama = {
 #   enable = true;
 # };

  nixpkgs.config.allowUnfree = true;
  environment.shellAliases = {
    docker = "podman";
    reboot_history = "last reboot";
    ls = "eza";
    list_generations = "sudo nix-env --list-generations --profile /nix/var/nix/profiles/system";
    # This is WHY - breaking up into separate files is dumb.
    #view_config = "bat ~/config/configuration.nix"; # defunct
    #edit_config = "vi ~/config/configuration.nix"; # defunct
    build_config = "cd ~/config && sudo nixos-rebuild build --flake ~/config/#x1 ; cd -";
    switch_config = "cd ~/config && sudo nixos-rebuild switch --flake ~/config/#x1 ; cd -";
    update_config = "cd ~/config && nix flake update ; cd -";
    rollback_one_generation = "sudo nixos-rebuild --rollback switch";
    collect_all_garbage = "sudo nix-collect-garbage -d";
    collect_some_garbage = "sudo nix-collect-garbage";
    follow_all_user_logging = "journalctl -f";
    follow_site_check = "journalctl --user -fu site_check.service";
    follow_wpa_log = "journalctl -fu wpa.supplicant.service";
  };
  environment.systemPackages = with pkgs; [
    nh # "nix helper" features for builds like trees etc
    mtr
    nix-output-monitor
    acpi # battery info, thermals, ac adapter
    lm_sensors # required by temperature block for i3status-rs
    dmidecode # determine memory configuration
    smartmontools # SMART disk health
    neofetch # see my system details
    lsof # list open files
    ecryptfs # Enterprise-class stacked cryptographic filesystem
    pstree # Show the set of running processes as a tree
    coreutils # fileutils, shellutils and textutils (ls, sort, head) https://www.gnu.org/software/coreutils/
    pciutils # idk
    hwinfo # hardware info
    lshw # list hardware
    usbutils # idk
    bind # "Domain name server" for nslookup
    file # info on files
    bat # better cat
    eza # ls improvement, written in rust
    #htop # better top
    btop # best top
    tmux # terminal multiplexer
    rustscan # scan ports fast https://rustscan.github.io/RustScan/
    gnutar gzip gawk gnused gnugrep patchelf findutils 
    fwts # Firmware Test Suite
    wget # e.g. wget -c http://example.com/bigfile.tar.gz
    lynx # terminal web browser
    w3m # another terminal web browser - nixos-help uses, so installing
    ispell # interactive spell-checking program for Unix (emacs)
    #librsvg # A small library to render SVG images to Cairo surfaces (using for svg in emacs)
    inkscape # for svg emacs... sigh...
    man
    man-pages
    pinfo # browse info pages with pinfo 
    tree
    git
    angband
    zip # needed for fce course?
    unzip
    p7zip
    cowsay
    # Programming languages and related utils
    entr # run arbitrary commands when files change
    sbcl
    rlwrap
    # jdk8
    jdk21
    #qemu-utils
    # jdk17
    valgrind
    #gcc
    gdb
    openmpi
    clang # conflicts with gcc...
    gnumake
    rlwrap
    oracle-instantclient
    sbcl
    spark
    sbt
    #hadoop # I think this is provided by spark because collisions
    pandoc
    #(rWrapper.override {packages = import ./RPackages.nix {inherit pkgs; }; })
    pyright
    (python3Full.withPackages (ps: with ps; [
      #stem # tor
      #python-sat # commented to demo
#      jedi-language-server
#      pycosat
#      pillow
#      types-pillow
      requests
#      types-requests
#      beautifulsoup4
#      guppy3 # get heap/memory layout info
#      pip
#      numpy
#      numpy-stl # stereolithography
#      scipy
#      mypy
#      flake8
#      pytest
#      coverage
#      cython
#      wheel
#      jupyterlab
#      flax
#      pyspark
#      networkx
#      pygraphviz
#      pygame
#      #tensorflow
#      # tensorflow-datasets
#      #keras
#      # torchaudio
     # pyright # for lsp in neovim
#    #   #jupyterlab_lsp # pypi says requires:
#    #   #python-language-server # see https://pypi.org/project/python-language-server/ :
#    #   #pyls-mypy
#    #   #pyls-isort
#    #   #pyls-black
      pandas
      statsmodels
      #ipython
      scikitlearn
#      sympy
#    #tornado
#    #   flask
#    #   django
#    #   pympler
#    #   pyqtgraph
    ]))
    (haskellPackages.ghcWithPackages (pkgs: with pkgs; [
      cabal-install
      lens
      yesod-bin
      tasty
      # intero # marked broken
      hlint        # req'd by haskell layer
      hspec
      pandoc
      apply-refact # req'd
      #stylish-haskell # marked broken
      hasktags
      hoogle
      # ghc-mod # marked broken
      #haskell-lsp
      #hie # not defined
      #ihaskell # maybe { allowBroken = true; }
      Euterpea
    ]))
    go
    rustc
    cargo
    rustfmt
    nodejs
    deno
  ] ++ (with elmPackages; [
    elm
    #elm-format
    elm-analyse # lint?
    elm-coverage
    elm-test
    elm-review
    elm-language-server
    elm-optimize-level-2
    elm-live # live reload
  ]) ++ (with nodePackages; [
    npm
    typescript
    typescript-language-server
    ts-node
    #create-next-app
    #react-tools
    #yarn # TODO - do I need this for hadoop or does hadoop supply its own?
  ]) ++ [
    # do I need these?: 
    kubectl # kubernetes 
    #docker # why?
    #podman # replaces docker (why ?) do I need this in addition to enable above?
    openshift
    #minishift # discontinued upstream, use crc instead
    crc # manage local OpenShift 4.x cluster or Podman VM optimized for testing and development
  ];
}