(use-modules (gnu)
             (gnu system)
             (gnu system setuid)

             (gnu services base)
             (gnu services mcron)
             (gnu services sysctl)
	     (gnu services dbus)
             (gnu services xorg)
             (gnu services sound)
             (gnu services desktop)
             (gnu services virtualization)
	     
             (gnu packages emacs)
             (gnu packages docker)
             (gnu packages wm)
             (gnu packages suckless)
             (gnu packages terminals)
             (gnu packages fonts)
             (gnu packages image)
             (gnu packages shells)
             (gnu packages xdisorg)
             (gnu packages pulseaudio)
             (gnu packages linux)
             (gnu packages admin)
             (gnu packages video)
             (gnu packages gnome)
             (gnu packages gnome-xyz)
             (gnu packages xfce)
             (gnu packages crypto)
             (gnu packages freedesktop)
             (gnu packages gnupg)
             (gnu packages music)
             (gnu packages web)
             (gnu packages networking)
	     (gnu packages vim)

             (nongnu packages linux)
             (nongnu system linux-initrd)

             (px system config)
             (px packages security-token)
             (px packages throttled)
             (px services networking)
             (px packages bluetooth)
	     (px packages images))

(use-service-modules docker
                     pm
                     web
                     security-token
                     sysctl
                     networking
                     mail
                     admin)

;; Allow members of the "video" group to change the screen brightness.
(define %backlight-udev-rule
  (udev-rule "90-backlight.rules"
             (string-append "ACTION==\"add\", SUBSYSTEM==\"backlight\", "
              "RUN+=\"/run/current-system/profile/bin/chgrp video /sys/class/backlight/intel_backlight/brightness\""
              "\n" "ACTION==\"add\", SUBSYSTEM==\"backlight\", "
              "RUN+=\"/run/current-system/profile/bin/chmod g+w /sys/class/backlight/intel_backlight/brightness\"")))

(define updatedb-job
  ;; Run 'updatedb' at 3AM every day.  Here we write the
  ;; job's action as a Scheme procedure.
  #~(job '(next-hour '(3))
         (lambda ()
           (execl (string-append #$findutils "/bin/updatedb") "updatedb"
                  "--prunepaths=/tmp /var/tmp /gnu/store"))))

(define garbage-collector-job
  ;; Collect garbage 5 minutes after midnight every day.
  ;; The job's action is a shell command.
  #~(job "5 0 * * *" ;Vixie cron syntax
         "guix gc -d 4m -F 10G"))

(define %custom-desktop-services
  (modify-services %px-desktop-core-services
    (delete login-service-type)
    (delete mingetty-service-type)
    (delete pulseaudio-service-type)
    (delete alsa-service-type)

    (sysctl-service-type 
      config =>
      (sysctl-configuration 
	(inherit config)
	(settings (append '(("fs.inotify.max_user_watches" . "524288"))
			  %default-sysctl-settings))))))

(px-desktop-os
 (operating-system
  (host-name "panther")
  (timezone "Europe/Lisbon")
  (locale "en_US.utf8")
  
  (kernel linux)
  (initrd microcode-initrd)
  (firmware
    (list linux-firmware))
  
  (initrd-modules
    (cons* "i915"
	   %base-initrd-modules))
  
  (kernel-arguments 
    (cons* "snd_hda_intel.dmic_detect=0"
	   %default-kernel-arguments))
  
  (bootloader (bootloader-configuration
               (bootloader grub-efi-bootloader)
               (targets '("/boot/efi"))))
  
  (mapped-devices
   (list
    (mapped-device
     (source (uuid "bf66bcde-3847-452b-a5e2-1906e5b9766d"))
     (target "cryptroot")
     (type luks-device-mapping))))
  
  (file-systems
   (append
    (list
     (file-system
      (device "/dev/mapper/cryptroot")
      (mount-point "/")
      (type "ext4")
      (dependencies mapped-devices))
     (file-system
      (device (uuid "14C5-1711"
                    'fat32))
      (mount-point "/boot/efi")
      (type "vfat")))
    %base-file-systems))
  
  (users
   (cons
    (user-account
     (name "franz")
     (comment "default")
     (group "users")
     (supplementary-groups
      '("wheel" 
	"netdev"
        "docker"
        "kvm"
        "audio"
        "video"
        "lpadmin"
        "lp"
        "plugdev"
        "input"))
     (home-directory "/home/franz"))
    %base-user-accounts))
  
  (packages
   (cons*
    emacs
    throttled
    docker
    containerd
    docker-cli
    libinput
    neovim
    swayfx
    swayidle ;; idle handling
    swaylock ;; lockscreen
    swaybg ;; backgrunds
    bemenu ;; quickstart menu
    j4-dmenu-desktop ;; flatpak apps in bemenu
    foot ;; terminal
    waybar ;; status bar
    dunst ;; notifications
    wlr-randr ;; display
    kanshi ;; auso display management
    wl-clipboard
    clipman
    grim ;; screenshot
    pinentry ;; pgp
    pavucontrol ;; pulseaudio gui
    pamixer ;; keyboard volume
    brightnessctl ;; keyboard backlight
    xdg-desktop-portal-wlr
    hicolor-icon-theme
    papirus-icon-theme
    gnome-themes-extra 
    adwaita-icon-theme    
    font-awesome
    xsettingsd ;; xwayland, java
    gvfs ;; mounts - probably not needed
    udiskie ;; auto-mounts
    xfconf ;; persist thunar changes
    thunar ;; files
    mpv ;; video
    qimgv ;; images

    %px-desktop-core-packages))
  
  (services
   (cons*
    (service screen-locker-service-type
             (screen-locker-configuration
	      (name "swaylock")
	      (program (file-append xlockmore "/bin/xlock"))))
    
    (service greetd-service-type
             (greetd-configuration
	      (terminals
	       (list
		(greetd-terminal-configuration
                 (terminal-vt
		  "1")
                 (terminal-switch
		  #t)
                 (default-session-command
                   (greetd-wlgreet-sway-session
                    (sway swayfx)
                    (sway-configuration
                     (local-file
                      "sway-greetd.conf")))))
                (greetd-terminal-configuration
                 (terminal-vt
                  "2"))
                (greetd-terminal-configuration
                 (terminal-vt
                  "3"))
                (greetd-terminal-configuration
                 (terminal-vt
                  "4"))
                (greetd-terminal-configuration
                 (terminal-vt
                  "5"))
                (greetd-terminal-configuration
                 (terminal-vt
                  "6"))))))
    
    (service unattended-upgrade-service-type
             (unattended-upgrade-configuration
	      (schedule
               "0 12 * * *")
              (channels #~
                        (cons*
			 (channel
                          (name 'pantherx)
                          (branch "master")
                          (url "https://channels.pantherx.org/git/panther.git")
                          (introduction
                           (make-channel-introduction
                            "54b4056ac571611892c743b65f4c47dc298c49da"
                            (openpgp-fingerprint
                             "A36A D41E ECC7 A871 1003  5D24 524F EB1A 9D33 C9CB"))))
                         %default-channels))))
    
    (service dovecot-service-type
             (dovecot-configuration
	      (mail-location
               "maildir:~/.mail")))
    
    (service docker-service-type)
    (service nebula-service-type)
    (simple-service 'my-cron-jobs mcron-service-type
                    (list garbage-collector-job
                          updatedb-job))
    
    (udev-rules-service 'backlight %backlight-udev-rule)
    
    (service pcscd-service-type
             (pcscd-configuration 
	       (usb-drivers 
		 (list acsccid))))
    
    %custom-desktop-services)))
 
 #:kernel 'custom
 #:open-ports '(("tcp" "4001" "22000" "3000")))