dotfiles/modules/base/default.nix

{
  lib,
  config,
  pkgs,
  ...
}:

with lib;
let
  cfg = config.modules.base;
in
{
  options.modules.base = {
    enable = mkEnableOption "base";
  };

  config = mkIf cfg.enable {
    environment.systemPackages = with pkgs; [
      # Add base linux utilities
      git
      wget
      curl
      dig
      procps
      wireguard-tools
      usbutils
      pciutils
      zip
      unzip

      # TODO: MOVE
      quickemu # TODO: Reenable once building this is fixed
      pdftk

      # TODO: Move to USB module
      # usbutils
      # udiskie
      # udisks
    ];

    security.krb5 = {
      enable = true;
      settings = {
        libdefaults = {
          rdns = false;
        };
        realms = {
          "GEWISWG.GEWIS.NL" = {
            kdc = [
              "https://gewisvdesktop.gewis.nl/KdcProxy"
            ];
          };
        };
      };
    };

    modules = {
      # Enable base modules
      clean-tmp.enable = true;
      fontconfig.enable = true;
      neovim.enable = true;
      systemd-boot.enable = true;
      tuigreet.enable = true;
      networkmanager.enable = true;
    };

    # TODO: Remove everything below, it is here out of convenience and should be elsewhere
    # networking.nameservers = [
    #   "9.9.9.9"
    #   "149.112.112.112"
    # ];
    # programs.captive-browser.enable = true;
    services.resolved = {
      enable = true;
    };
    networking.firewall.enable = true;
    programs.dconf.enable = true;
    services.libinput.enable = true;
    modules.unfree.enable = true;
    modules.unfree.allowedPackages = [
      "nvidia-x11"
      "nvidia-settings"
    ];
    nix.settings.experimental-features = "nix-command flakes";
    networking.useDHCP = true;
    nixpkgs.hostPlatform = "x86_64-linux";
    networking.firewall.allowedTCPPortRanges = [
      {
        from = 10000;
        to = 11000;
      }
    ];
    networking.firewall.allowedUDPPortRanges = [
      {
        from = 10000;
        to = 11000;
      }
    ];

    # TODO: Move to USB module
    # services.gvfs.enable = true;
    services.udisks2.enable = true;
  };
}