{ ... }: {
  services.samba = {
    enable = true;
    extraConfig = ''
      # 192.168.111 host's my local VM network - nothing off
      # that should get access.
      workgroup = WORKGROUP
      hosts allow = localhost  192.168.111.0/255.255.255.0
      server min protocol = SMB2
      server string = local_file_share
      netbios name = nixos
      use sendfile = yes
      guest account = nobody
      map to guest = bad user
    '';
    shares = {
      bender = {
        path = "/mnt/share/bender";
        browseable = "yes";
        "read only" = "no";
        "valid users" = "bender";
        "directory mask" = "0750";
      };
    };
  };
}

{ ... }: {
  services.samba = {
    enable = true;
    extraConfig = ''
      # 192.168.111 host's my local VM network - nothing off
      # that should get access.
      workgroup = WORKGROUP
      hosts allow = localhost  192.168.111.0/255.255.255.0
      server min protocol = SMB2
      server string = local_file_share
      netbios name = nixos
      use sendfile = yes
      guest account = nobody
      map to guest = bad user
    '';
    shares = {
      bender = {
        path = "/mnt/share/bender";
        browseable = "yes";
        "read only" = "no";
        "valid users" = "bender";
        "directory mask" = "0750";
      };
    };
  };
}

# Do not modify this file!  It was generated by ‘nixos-generate-config’
# and may be overwritten by future invocations.  Please make changes
# to /etc/nixos/configuration.nix instead.
{ config, lib, pkgs, modulesPath, ... }:
{
  imports = [ ];
  boot.initrd.availableKernelModules = [ "sd_mod" "sr_mod" ];
  boot.initrd.kernelModules = [ ];
  boot.kernelModules = [ ];
  boot.extraModulePackages = [ ];
  fileSystems."/" =
    { device = "/dev/disk/by-uuid/c00f5522-0691-447d-90a7-a364f2a9be91";
      fsType = "ext4";
    };
  swapDevices = [ ];
  virtualisation.hypervGuest.enable = true;
}

# Do not modify this file!  It was generated by ‘nixos-generate-config’
# and may be overwritten by future invocations.  Please make changes
# to /etc/nixos/configuration.nix instead.
{ config, lib, pkgs, modulesPath, ... }:
{
  imports = [ ];
  boot.initrd.availableKernelModules = [ "sd_mod" "sr_mod" ];
  boot.initrd.kernelModules = [ ];
  boot.kernelModules = [ ];
  boot.extraModulePackages = [ ];
  fileSystems."/" =
    { device = "/dev/disk/by-uuid/c00f5522-0691-447d-90a7-a364f2a9be91";
      fsType = "ext4";
    };
  swapDevices = [ ];
  virtualisation.hypervGuest.enable = true;
}

# Edit this configuration file to define what should be installed on
# your system.  Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’).
{ config, pkgs, ... }:
{
  nix = {
    package = pkgs.nixUnstable;
    extraOptions = ''
      experimental-features = nix-command flakes
    '';
  };
  imports =
    [ # Include the results of the hardware scan.
      ./hardware-configuration.nix
      # this sets up the share for the host, Nix, and
      # anything else I feel like adding to the network.
      ./samba_share_local.nix
    ];
  nixpkgs.config.allowUnfree = true;
  virtualisation.hypervGuest = {
    enable = true;
    videoMode = "1680x1050";
  };
  boot.kernelPackages = pkgs.nixpkgs-master.linuxPackages_latest;
  # Use the systemd-boot EFI boot loader.
  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;
  networking.hostName = "nixos"; # Define your hostname.
  # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.
  # Set your time zone.
  # time.timeZone = "Europe/Amsterdam";
  # The global useDHCP flag is deprecated, therefore explicitly set to false here.
  # Per-interface useDHCP will be mandatory in the future, so this generated config
  # replicates the default behaviour.
  networking.useDHCP = false;
  networking.interfaces.eth0.useDHCP = true;
  networking.nameservers = ["1.1.1.1" "199.16.166.186" "199.17.166.187"];
  networking.interfaces.enp0.ipv4.addresses = [{
    address = "192.168.111.11";
    prefixLength = 24;
  }];
  # Open ports in the firewall.
  networking.firewall.allowedTCPPorts = [
    5201 # iperf
    445 139 #samba
  ];
  networking.firewall.allowedUDPPorts = [
    5201 # iperf
    137 138 #samba
  ];
  # Or disable the firewall altogether.
  # networking.firewall.enable = false;
  # Configure network proxy if necessary
  # networking.proxy.default = "http://user:password@proxy:port/";
  # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
  # Select internationalisation properties.
  # i18n.defaultLocale = "en_US.UTF-8";
  # console = {
  #   font = "Lat2-Terminus16";
  #   keyMap = "us";
  # };
  # Enable the X11 windowing system.
  services.xserver.enable = true;
  # Enable the GNOME Desktop Environment.
  services.xserver.desktopManager.gnome.enable = true;
  
  # Configure keymap in X11
  # services.xserver.layout = "us";
  # services.xserver.xkbOptions = "eurosign:e";
  # Enable CUPS to print documents.
  # services.printing.enable = true;
  # Enable sound.
  # sound.enable = true;
  # hardware.pulseaudio.enable = true;
  # Enable touchpad support (enabled default in most desktopManager).
  # services.xserver.libinput.enable = true;
  # Define a user account. Don't forget to set a password with ‘passwd’.
  # users.users.jane = {
  #   isNormalUser = true;
  #   extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user.
  # };
  users.users.bender = {
    isNormalUser = true;
    extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user.
  };
  # List packages installed in system profile. To search, run:
  # $ nix search wget
  environment.systemPackages = with pkgs; [
    iperf
    keepassx
  ];
  environment.variables.EDITOR = "nvim";
  # Some programs need SUID wrappers, can be configured further or are
  # started in user sessions.
  # programs.mtr.enable = true;
  # programs.gnupg.agent = {
  #   enable = true;
  #   enableSSHSupport = true;
  # };
  # List services that you want to enable:
  # Enable the OpenSSH daemon.
  # services.openssh.enable = true;
  # This value determines the NixOS release from which the default
  # settings for stateful data, like file locations and database versions
  # on your system were taken. It‘s perfectly fine and recommended to leave
  # this value at the release version of the first install of this system.
  # Before changing this value read the documentation for this option
  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
  system.stateVersion = "21.05"; # Did you read the comment?
}

# Edit this configuration file to define what should be installed on
# your system.  Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’).
{ config, pkgs, ... }:
{
  nix = {
    package = pkgs.nixUnstable;
    extraOptions = ''
      experimental-features = nix-command flakes
    '';
  };
  imports =
    [ # Include the results of the hardware scan.
      ./hardware-configuration.nix
      # this sets up the share for the host, Nix, and
      # anything else I feel like adding to the network.
      ./samba_share_local.nix
    ];
  nixpkgs.config.allowUnfree = true;
  virtualisation.hypervGuest = {
    enable = true;
    videoMode = "1680x1050";
  };
  boot.kernelPackages = pkgs.nixpkgs-master.linuxPackages_latest;
  # Use the systemd-boot EFI boot loader.
  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;
  networking.hostName = "nixos"; # Define your hostname.
  # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.
  # Set your time zone.
  # time.timeZone = "Europe/Amsterdam";
  # The global useDHCP flag is deprecated, therefore explicitly set to false here.
  # Per-interface useDHCP will be mandatory in the future, so this generated config
  # replicates the default behaviour.
  networking.useDHCP = false;
  networking.interfaces.eth0.useDHCP = true;
  networking.nameservers = ["1.1.1.1" "199.16.166.186" "199.17.166.187"];
  networking.interfaces.enp0.ipv4.addresses = [{
    address = "192.168.111.11";
    prefixLength = 24;
  }];
  # Open ports in the firewall.
  networking.firewall.allowedTCPPorts = [
    5201 # iperf
    445 139 #samba
  ];
  networking.firewall.allowedUDPPorts = [
    5201 # iperf
    137 138 #samba
  ];
  # Or disable the firewall altogether.
  # networking.firewall.enable = false;
  # Configure network proxy if necessary
  # networking.proxy.default = "http://user:password@proxy:port/";
  # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
  # Select internationalisation properties.
  # i18n.defaultLocale = "en_US.UTF-8";
  # console = {
  #   font = "Lat2-Terminus16";
  #   keyMap = "us";
  # };
  # Enable the X11 windowing system.
  services.xserver.enable = true;
  # Enable the GNOME Desktop Environment.
  services.xserver.desktopManager.gnome.enable = true;
  
  # Configure keymap in X11
  # services.xserver.layout = "us";
  # services.xserver.xkbOptions = "eurosign:e";
  # Enable CUPS to print documents.
  # services.printing.enable = true;
  # Enable sound.
  # sound.enable = true;
  # hardware.pulseaudio.enable = true;
  # Enable touchpad support (enabled default in most desktopManager).
  # services.xserver.libinput.enable = true;
  # Define a user account. Don't forget to set a password with ‘passwd’.
  # users.users.jane = {
  #   isNormalUser = true;
  #   extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user.
  # };
  users.users.bender = {
    isNormalUser = true;
    extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user.
  };
  # List packages installed in system profile. To search, run:
  # $ nix search wget
  environment.systemPackages = with pkgs; [
    iperf
    keepassx
  ];
  environment.variables.EDITOR = "nvim";
  # Some programs need SUID wrappers, can be configured further or are
  # started in user sessions.
  # programs.mtr.enable = true;
  # programs.gnupg.agent = {
  #   enable = true;
  #   enableSSHSupport = true;
  # };
  # List services that you want to enable:
  # Enable the OpenSSH daemon.
  # services.openssh.enable = true;
  # This value determines the NixOS release from which the default
  # settings for stateful data, like file locations and database versions
  # on your system were taken. It‘s perfectly fine and recommended to leave
  # this value at the release version of the first install of this system.
  # Before changing this value read the documentation for this option
  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
  system.stateVersion = "21.05"; # Did you read the comment?
}

{ config, pkgs, lib, ... }:
let server_bindings = [
  {name = "fedora"; pubKey = "5oqbinscH3o9mWBFNYOPdHrMB5NOw1P/AGK4I5exAmY="; ip  = "10.100.0.2";}
];
in {
  services.bind = {
    enable = true;
    forwarders = ["192.168.1.1"];
    cacheNetworks = ["10.100.0.0/16" "127.0.0.0/24"];
      zones = {
      "server.home.arpa" = {
        master = true;
        file = pkgs.writeText "server-zone-conf" ''
              $TTL 1h
              @        IN  SOA wireguard.server.home.arpa. admin.wireguard.server.home.arpa. (
                              21121201       ; Serial
                              1H    ; Refresh
                              1H    ; Retry
                              1W      ; Expire
                              3H      ); Negative Cache TTL 
                              
               IN       NS   wireguard
              wireguard IN A 10.100.0.1
              ${builtins.concatStringsSep "\n" (builtins.map ({name, ip, ...}: "${name} IN A ${ip}" ) server_bindings)}
              ;fedora   IN A 10.100.0.2
        '';
      };
    };
  };
  networking.nat = {
    enable = true;
    externalInterface = "ens18";
    internalInterfaces = ["wg0"];
  };
  networking.nameservers = ["192.168.1.1" "127.0.0.1"];
  networking.wireguard.interfaces = {
    wg0 = {
      ips = ["10.100.0.1/24"];
      listenPort = 51820;
      privateKeyFile = config.age.secrets."wireguard/private.key".path;
      # This allows the wireguard server to route your traffic to the internet and hence be like a VPN
      # For this to work you have to set the dnsserver IP of your router (or dnsserver of choice) in your clients
      postSetup = ''
        ${pkgs.iptables}/bin/iptables -t nat -A POSTROUTING -s 10.100.0.0/16 -o eth0 -j MASQUERADE
      '';
      # This undoes the above command
      postShutdown = ''
        ${pkgs.iptables}/bin/iptables -t nat -D POSTROUTING -s 10.100.0.0/24 -o eth0 -j MASQUERADE
      '';
      peers = [
        { # Windows desktop
          publicKey = "cuPku4mcym5S7KR1/NJMwAFnw7+yUeCq8KmJv52dqEk=";
          # List of IPs assigned to this peer within the tunnel subnet. Used to configure routing.
          allowedIPs = [ "10.100.1.1/32" ];
        }
      ] ++ (builtins.map ({pubKey, ip, ...}: {publicKey = pubKey; allowedIPs = ["${ip}/32"];}) server_bindings);
    };
  };
  age.secrets."wireguard/private.key".file = ../../secrets/wireguard/private.key;
  networking.firewall.allowedUDPPorts = [ 51820 ];
}

{ config, pkgs, lib, ... }:
let server_bindings = [
  {name = "fedora"; pubKey = "5oqbinscH3o9mWBFNYOPdHrMB5NOw1P/AGK4I5exAmY="; ip  = "10.100.0.2";}
];
in {
  services.bind = {
    enable = true;
    forwarders = ["192.168.1.1"];
    cacheNetworks = ["10.100.0.0/16" "127.0.0.0/24"];
      zones = {
      "server.home.arpa" = {
        master = true;
        file = pkgs.writeText "server-zone-conf" ''
              $TTL 1h
              @        IN  SOA wireguard.server.home.arpa. admin.wireguard.server.home.arpa. (
                              21121201       ; Serial
                              1H    ; Refresh
                              1H    ; Retry
                              1W      ; Expire
                              3H      ); Negative Cache TTL 
                              
               IN       NS   wireguard
              wireguard IN A 10.100.0.1
              ${builtins.concatStringsSep "\n" (builtins.map ({name, ip, ...}: "${name} IN A ${ip}" ) server_bindings)}
              ;fedora   IN A 10.100.0.2
        '';
      };
    };
  };
  networking.nat = {
    enable = true;
    externalInterface = "ens18";
    internalInterfaces = ["wg0"];
  };
  networking.nameservers = ["192.168.1.1" "127.0.0.1"];
  networking.wireguard.interfaces = {
    wg0 = {
      ips = ["10.100.0.1/24"];
      listenPort = 51820;
      privateKeyFile = config.age.secrets."wireguard/private.key".path;
      # This allows the wireguard server to route your traffic to the internet and hence be like a VPN
      # For this to work you have to set the dnsserver IP of your router (or dnsserver of choice) in your clients
      postSetup = ''
        ${pkgs.iptables}/bin/iptables -t nat -A POSTROUTING -s 10.100.0.0/16 -o eth0 -j MASQUERADE
      '';
      # This undoes the above command
      postShutdown = ''
        ${pkgs.iptables}/bin/iptables -t nat -D POSTROUTING -s 10.100.0.0/24 -o eth0 -j MASQUERADE
      '';
      peers = [
        { # Windows desktop
          publicKey = "cuPku4mcym5S7KR1/NJMwAFnw7+yUeCq8KmJv52dqEk=";
          # List of IPs assigned to this peer within the tunnel subnet. Used to configure routing.
          allowedIPs = [ "10.100.1.1/32" ];
        }
      ] ++ (builtins.map ({pubKey, ip, ...}: {publicKey = pubKey; allowedIPs = ["${ip}/32"];}) server_bindings);
    };
  };
  age.secrets."wireguard/private.key".file = ../../secrets/wireguard/private.key;
  networking.firewall.allowedUDPPorts = [ 51820 ];
}

{ config, pkgs, ... }: {
  services.zabbixServer.enable = true;
  services.zabbixWeb = {
    enable = true;
    server = {
      port = 10051;
      address = "10.100.0.1";
    };
    virtualHost = {
      hostName = "wireguard.server.home.arpa";
      adminAddr = "tmp@tmp.org";
    };
  };
  services.zabbixAgent = {
    enable = true;
    server = "localhost";
  };
  services.promtail = {
    enable = true;
    configuration = {
      server.http_listen_port = 9080;
      server.grpc_listen_port = 0;
      clients = [{url = "http://localhost:3100/loki/api/v1/push";}];
      scrape_configs = [{
        job_name = "journal";
        journal = {
          max_age = "12h";
          labels = {
            job = "systemd-journal";
            server = "wireguard";
          };
        };
        #relable_configs = [{source_label = "__journal__systemd_unit"; target_label = "unit";}];
      }];
    };
  };
  services.grafana = {
    enable = true;
    addr = "";
    domain = "wireguard.server.home.arpa";
    port = 3000;
    protocol = "http";
  };
  services.loki = {
    enable = true;
    configFile = pkgs.writeText "config.yaml" ''
      auth_enabled: false
      server:
        http_listen_port: 3100
        grpc_listen_port: 9096
      ingester:
        wal:
          enabled: true
          dir: /tmp/wal
        lifecycler:
          address: 127.0.0.1
          ring:
            kvstore:
              store: inmemory
            replication_factor: 1
          final_sleep: 0s
        chunk_idle_period: 1h       # Any chunk not receiving new logs in this time will be flushed
        max_chunk_age: 1h           # All chunks will be flushed when they hit this age, default is 1h
        chunk_target_size: 1048576  # Loki will attempt to build chunks up to 1.5MB, flushing first if chunk_idle_period or max_chunk_age is reached first
        chunk_retain_period: 30s    # Must be greater than index read cache TTL if using an index cache (Default index read cache TTL is 5m)
        max_transfer_retries: 0     # Chunk transfers disabled
      schema_config:
        configs:
          - from: 2020-10-24
            store: boltdb-shipper
            object_store: filesystem
            schema: v11
            index:
              prefix: index_
              period: 24h
      storage_config:
        boltdb_shipper:
          active_index_directory: /tmp/loki/boltdb-shipper-active
          cache_location: /tmp/loki/boltdb-shipper-cache
          cache_ttl: 24h         # Can be increased for faster performance over longer query periods, uses more disk space
          shared_store: filesystem
        filesystem:
          directory: /tmp/loki/chunks
      compactor:
        working_directory: /tmp/loki/boltdb-shipper-compactor
        shared_store: filesystem
      limits_config:
        reject_old_samples: true
        reject_old_samples_max_age: 168h
      chunk_store_config:
        max_look_back_period: 0s
      table_manager:
        retention_deletes_enabled: false
        retention_period: 0s
      ruler:
        storage:
          type: local
          local:
            directory: /tmp/loki/rules
        rule_path: /tmp/loki/rules-temp
        alertmanager_url: http://localhost:9093
        ring:
          kvstore:
            store: inmemory
        enable_api: true'';
    #configuration = {
    #  auth_enabled = false;
    #  server = {
    #    http_listen_port = 3100;
    #    grpc_listen_port = 9096;
    #  };
    #  common = {
    #    path_prefix = "/tmp/loki";
    #    storage = {
    #      filesystem = {
    #        chunks_directory = "/tmp/loki/chunks";
    #        rules_directory = "/tmp/loki/rules";
    #      };
    #      replication_factor = 1;
    #      ring = {
    #        instance_addr = "127.0.0.1";
    #        kv_store = {
    #          store = "inmemory";
    #        };
    #      };
    #    };
    #  };
    #  schema_config = {
    #    configs = [{
    #      from = "2021-12-15";
    #      store = "boltdb-shipper";
    #      object_store = "filesystem";
    #      schema = "v11";
    #      index = {
    #        prefix = "index_";
    #        period = "24h";
    #      };
    #    }];
    #  };
    #  ruler = {
    #    alertmanager_url = "http://localhost:9093";
    #  };
    #};
  };
  networking.firewall.allowedTCPPorts = [80 3000 9002 9000 10051];
  services.prometheus =
      let servers = ["fedora" "wireguard"];
      in
  {
    enable = true;
    scrapeConfigs =
      builtins.map (server: {
          job_name = "${server}";
          static_configs = [{
            labels = {
              server = "${server}";
            };
            targets = ["${server}.server.home.arpa:9002"];
          }];
        }) servers;
    exporters = {
      node = {
        enable = true;
        enabledCollectors = ["systemd"];
        port = 9002;
      };
    };
  };
}

{ config, pkgs, ... }: {
  services.zabbixServer.enable = true;
  services.zabbixWeb = {
    enable = true;
    server = {
      port = 10051;
      address = "10.100.0.1";
    };
    virtualHost = {
      hostName = "wireguard.server.home.arpa";
      adminAddr = "tmp@tmp.org";
    };
  };
  services.zabbixAgent = {
    enable = true;
    server = "localhost";
  };
  services.promtail = {
    enable = true;
    configuration = {
      server.http_listen_port = 9080;
      server.grpc_listen_port = 0;
      clients = [{url = "http://localhost:3100/loki/api/v1/push";}];
      scrape_configs = [{
        job_name = "journal";
        journal = {
          max_age = "12h";
          labels = {
            job = "systemd-journal";
            server = "wireguard";
          };
        };
        #relable_configs = [{source_label = "__journal__systemd_unit"; target_label = "unit";}];
      }];
    };
  };
  services.grafana = {
    enable = true;
    addr = "";
    domain = "wireguard.server.home.arpa";
    port = 3000;
    protocol = "http";
  };
  services.loki = {
    enable = true;
    configFile = pkgs.writeText "config.yaml" ''
      auth_enabled: false
      server:
        http_listen_port: 3100
        grpc_listen_port: 9096
      ingester:
        wal:
          enabled: true
          dir: /tmp/wal
        lifecycler:
          address: 127.0.0.1
          ring:
            kvstore:
              store: inmemory
            replication_factor: 1
          final_sleep: 0s
        chunk_idle_period: 1h       # Any chunk not receiving new logs in this time will be flushed
        max_chunk_age: 1h           # All chunks will be flushed when they hit this age, default is 1h
        chunk_target_size: 1048576  # Loki will attempt to build chunks up to 1.5MB, flushing first if chunk_idle_period or max_chunk_age is reached first
        chunk_retain_period: 30s    # Must be greater than index read cache TTL if using an index cache (Default index read cache TTL is 5m)
        max_transfer_retries: 0     # Chunk transfers disabled
      schema_config:
        configs:
          - from: 2020-10-24
            store: boltdb-shipper
            object_store: filesystem
            schema: v11
            index:
              prefix: index_
              period: 24h
      storage_config:
        boltdb_shipper:
          active_index_directory: /tmp/loki/boltdb-shipper-active
          cache_location: /tmp/loki/boltdb-shipper-cache
          cache_ttl: 24h         # Can be increased for faster performance over longer query periods, uses more disk space
          shared_store: filesystem
        filesystem:
          directory: /tmp/loki/chunks
      compactor:
        working_directory: /tmp/loki/boltdb-shipper-compactor
        shared_store: filesystem
      limits_config:
        reject_old_samples: true
        reject_old_samples_max_age: 168h
      chunk_store_config:
        max_look_back_period: 0s
      table_manager:
        retention_deletes_enabled: false
        retention_period: 0s
      ruler:
        storage:
          type: local
          local:
            directory: /tmp/loki/rules
        rule_path: /tmp/loki/rules-temp
        alertmanager_url: http://localhost:9093
        ring:
          kvstore:
            store: inmemory
        enable_api: true'';
    #configuration = {
    #  auth_enabled = false;
    #  server = {
    #    http_listen_port = 3100;
    #    grpc_listen_port = 9096;
    #  };
    #  common = {
    #    path_prefix = "/tmp/loki";
    #    storage = {
    #      filesystem = {
    #        chunks_directory = "/tmp/loki/chunks";
    #        rules_directory = "/tmp/loki/rules";
    #      };
    #      replication_factor = 1;
    #      ring = {
    #        instance_addr = "127.0.0.1";
    #        kv_store = {
    #          store = "inmemory";
    #        };
    #      };
    #    };
    #  };
    #  schema_config = {
    #    configs = [{
    #      from = "2021-12-15";
    #      store = "boltdb-shipper";
    #      object_store = "filesystem";
    #      schema = "v11";
    #      index = {
    #        prefix = "index_";
    #        period = "24h";
    #      };
    #    }];
    #  };
    #  ruler = {
    #    alertmanager_url = "http://localhost:9093";
    #  };
    #};
  };
  networking.firewall.allowedTCPPorts = [80 3000 9002 9000 10051];
  services.prometheus =
      let servers = ["fedora" "wireguard"];
      in
  {
    enable = true;
    scrapeConfigs =
      builtins.map (server: {
          job_name = "${server}";
          static_configs = [{
            labels = {
              server = "${server}";
            };
            targets = ["${server}.server.home.arpa:9002"];
          }];
        }) servers;
    exporters = {
      node = {
        enable = true;
        enabledCollectors = ["systemd"];
        port = 9002;
      };
    };
  };
}

# Do not modify this file!  It was generated by ‘nixos-generate-config’
# and may be overwritten by future invocations.  Please make changes
# to /etc/nixos/configuration.nix instead.
{ config, lib, pkgs, modulesPath, ... }:
{
  imports = [ ];
  boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "sd_mod" "sr_mod" ];
  boot.initrd.kernelModules = [ ];
  boot.kernelModules = [ ];
  boot.extraModulePackages = [ ];
  fileSystems."/" =
    { device = "/dev/disk/by-uuid/5dc0d3b1-5c8f-4796-9f54-6fa499ed8e61";
      fsType = "ext4";
    };
  swapDevices = [ ];
  virtualisation.hypervGuest.enable = true;
}

# Do not modify this file!  It was generated by ‘nixos-generate-config’
# and may be overwritten by future invocations.  Please make changes
# to /etc/nixos/configuration.nix instead.
{ config, lib, pkgs, modulesPath, ... }:
{
  imports = [ ];
  boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "sd_mod" "sr_mod" ];
  boot.initrd.kernelModules = [ ];
  boot.kernelModules = [ ];
  boot.extraModulePackages = [ ];
  fileSystems."/" =
    { device = "/dev/disk/by-uuid/5dc0d3b1-5c8f-4796-9f54-6fa499ed8e61";
      fsType = "ext4";
    };
  swapDevices = [ ];
  virtualisation.hypervGuest.enable = true;
}

{config, pkgs, ...}:
{
  services.ddclient = {
    enable = true;
    protocol = "namecheap";
    domains = ["internal"];
    passwordFile = config.age.secrets."dyndns/password.priv".path;
    username = "arvinderd.com";
  };
  age.secrets."dyndns/password.priv".file = ../../secrets/dyndns/password.priv;
}

{config, pkgs, ...}:
{
  services.ddclient = {
    enable = true;
    protocol = "namecheap";
    domains = ["internal"];
    passwordFile = config.age.secrets."dyndns/password.priv".path;
    username = "arvinderd.com";
  };
  age.secrets."dyndns/password.priv".file = ../../secrets/dyndns/password.priv;
}

$TTL 1h
@        IN  SOA wireguard.server.home.arpa. admin.wireguard.server.home.arpa. (
                21121201       ; Serial
                1H    ; Refresh
                1H    ; Retry
                1W      ; Expire
                3H      ); Negative Cache TTL 
		
 IN       NS   wireguard
wireguard IN A 10.100.0.1
fedora   IN A 10.100.0.2

$TTL 1h
@        IN  SOA wireguard.server.home.arpa. admin.wireguard.server.home.arpa. (
                21121201       ; Serial
                1H    ; Refresh
                1H    ; Retry
                1W      ; Expire
                3H      ); Negative Cache TTL 
		
 IN       NS   wireguard
wireguard IN A 10.100.0.1
fedora   IN A 10.100.0.2

  # Edit this configuration file to define what should be installed on
# your system.  Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’).
{ config, pkgs, ... }:
{
  imports =
    [ # Include the results of the hardware scan.
      ./hardware-configuration.nix
      ./wireguard.nix
      ./prometheus.nix
      ./dyndns.nix
    ];
  nix = { package = pkgs.nixFlakes; extraOptions = ''experimental-features  = nix-command flakes''; };
  nixpkgs.config.allowUnfree = true;
  boot.loader.systemd-boot.enable = true;
  networking.hostName = "nixos"; # Define your hostname.
  # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.
  # Set your time zone.
  time.timeZone = "America/Chicago";
  # The global useDHCP flag is deprecated, therefore explicitly set to false here.
  # Per-interface useDHCP will be mandatory in the future, so this generated config
  # replicates the default behaviour.
  networking.useDHCP = false;
  networking.interfaces.ens18.useDHCP = true;
  networking.interfaces.ens18.ipv4.addresses = [{
    address = "192.168.1.24";
    prefixLength = 32;
  }];
  # Select internationalisation properties.
  # i18n.defaultLocale = "en_US.UTF-8";
  # console = {
  #   font = "Lat2-Terminus16";
  #   keyMap = "us";
  # };
  # Enable the GNOME 3 Desktop Environment.
  # services.xserver.enable = true;
  # services.xserver.displayManager.gdm.enable = true;
  # services.xserver.desktopManager.gnome3.enable = true;
  
  # Configure keymap in X11
  # services.xserver.layout = "us";
  # services.xserver.xkbOptions = "eurosign:e";
  # Enable CUPS to print documents.
  # services.printing.enable = true;
  # Enable sound.
  # sound.enable = true;
  # hardware.pulseaudio.enable = true;
  # Enable touchpad support (enabled default in most desktopManager).
  # services.xserver.libinput.enable = true;
  users.users.bender = {
    isNormalUser = true;
    extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user.
  };
  # List packages installed in system profile. To search, run:
  # $ nix search wget
  # environment.systemPackages = with pkgs; [
  #   wget vim
  #   firefox
  # ];
  # Some programs need SUID wrappers, can be configured further or are
  # started in user sessions.
  # programs.mtr.enable = true;
  # programs.gnupg.agent = {
  #   enable = true;
  #   enableSSHSupport = true;
  # };
  # List services that you want to enable:
  # Enable the OpenSSH daemon.
  services.openssh.enable = true;
  services.journald.extraConfig = ''
    SystemMaxUse = 1G
  '';
  # Open ports in the firewall.
  networking.firewall.allowedTCPPorts = [
    22 #ssh
    53 #DNS
  ];
  networking.firewall.allowedUDPPorts = [
   53 #DNS
  ];
  # Or disable the firewall altogether.
  # networking.firewall.enable = false;
  # This value determines the NixOS release from which the default
  # settings for stateful data, like file locations and database versions
  # on your system were taken. It‘s perfectly fine and recommended to leave
  # this value at the release version of the first install of this system.
  # Before changing this value read the documentation for this option
  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
  system.stateVersion = "20.09"; # Did you read the comment?
}

  # Edit this configuration file to define what should be installed on
# your system.  Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’).
{ config, pkgs, ... }:
{
  imports =
    [ # Include the results of the hardware scan.
      ./hardware-configuration.nix
      ./wireguard.nix
      ./prometheus.nix
      ./dyndns.nix
    ];
  nix = { package = pkgs.nixFlakes; extraOptions = ''experimental-features  = nix-command flakes''; };
  nixpkgs.config.allowUnfree = true;
  boot.loader.systemd-boot.enable = true;
  networking.hostName = "nixos"; # Define your hostname.
  # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.
  # Set your time zone.
  time.timeZone = "America/Chicago";
  # The global useDHCP flag is deprecated, therefore explicitly set to false here.
  # Per-interface useDHCP will be mandatory in the future, so this generated config
  # replicates the default behaviour.
  networking.useDHCP = false;
  networking.interfaces.ens18.useDHCP = true;
  networking.interfaces.ens18.ipv4.addresses = [{
    address = "192.168.1.24";
    prefixLength = 32;
  }];
  # Select internationalisation properties.
  # i18n.defaultLocale = "en_US.UTF-8";
  # console = {
  #   font = "Lat2-Terminus16";
  #   keyMap = "us";
  # };
  # Enable the GNOME 3 Desktop Environment.
  # services.xserver.enable = true;
  # services.xserver.displayManager.gdm.enable = true;
  # services.xserver.desktopManager.gnome3.enable = true;
  
  # Configure keymap in X11
  # services.xserver.layout = "us";
  # services.xserver.xkbOptions = "eurosign:e";
  # Enable CUPS to print documents.
  # services.printing.enable = true;
  # Enable sound.
  # sound.enable = true;
  # hardware.pulseaudio.enable = true;
  # Enable touchpad support (enabled default in most desktopManager).
  # services.xserver.libinput.enable = true;
  users.users.bender = {
    isNormalUser = true;
    extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user.
  };
  # List packages installed in system profile. To search, run:
  # $ nix search wget
  # environment.systemPackages = with pkgs; [
  #   wget vim
  #   firefox
  # ];
  # Some programs need SUID wrappers, can be configured further or are
  # started in user sessions.
  # programs.mtr.enable = true;
  # programs.gnupg.agent = {
  #   enable = true;
  #   enableSSHSupport = true;
  # };
  # List services that you want to enable:
  # Enable the OpenSSH daemon.
  services.openssh.enable = true;
  services.journald.extraConfig = ''
    SystemMaxUse = 1G
  '';
  # Open ports in the firewall.
  networking.firewall.allowedTCPPorts = [
    22 #ssh
    53 #DNS
  ];
  networking.firewall.allowedUDPPorts = [
   53 #DNS
  ];
  # Or disable the firewall altogether.
  # networking.firewall.enable = false;
  # This value determines the NixOS release from which the default
  # settings for stateful data, like file locations and database versions
  # on your system were taken. It‘s perfectly fine and recommended to leave
  # this value at the release version of the first install of this system.
  # Before changing this value read the documentation for this option
  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
  system.stateVersion = "20.09"; # Did you read the comment?
}

# Do not modify this file!  It was generated by ‘nixos-generate-config’
# and may be overwritten by future invocations.  Please make changes
# to /etc/nixos/configuration.nix instead.
{ config, lib, pkgs, modulesPath, ... }:
{
  imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
  boot.initrd.availableKernelModules =
    [ "xhci_pci" "ahci" "sd_mod" "rtsx_usb_sdmmc" ];
  boot.initrd.kernelModules = [ ];
  boot.kernelModules = [ "kvm-intel" ];
  boot.extraModulePackages = [ ];
  fileSystems."/" = {
    device = "/dev/disk/by-uuid/3825289c-8591-4ece-a214-a28f6dd6a47e";
    fsType = "btrfs";
  };
  fileSystems."/boot" = {
    device = "/dev/disk/by-uuid/F8D0-D471";
    fsType = "vfat";
  };
  swapDevices = [ ];
  powerManagement.cpuFreqGovernor = lib.mkDefault "powersave";
}

# Do not modify this file!  It was generated by ‘nixos-generate-config’
# and may be overwritten by future invocations.  Please make changes
# to /etc/nixos/configuration.nix instead.
{ config, lib, pkgs, modulesPath, ... }:
{
  imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
  boot.initrd.availableKernelModules =
    [ "xhci_pci" "ahci" "sd_mod" "rtsx_usb_sdmmc" ];
  boot.initrd.kernelModules = [ ];
  boot.kernelModules = [ "kvm-intel" ];
  boot.extraModulePackages = [ ];
  fileSystems."/" = {
    device = "/dev/disk/by-uuid/3825289c-8591-4ece-a214-a28f6dd6a47e";
    fsType = "btrfs";
  };
  fileSystems."/boot" = {
    device = "/dev/disk/by-uuid/F8D0-D471";
    fsType = "vfat";
  };
  swapDevices = [ ];
  powerManagement.cpuFreqGovernor = lib.mkDefault "powersave";
}

# Edit this configuration file to define what should be installed on
# your system.  Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’).
{ config, pkgs, ... }:
{
  nix = {
    package = pkgs.nixUnstable;
    extraOptions = ''
      experimental-features = nix-command flakes
    '';
  };
  imports = [ ./hardware-configuration.nix ];
  nixpkgs.config.allowUnfree = true;
  #autoupdates
  system.autoUpgrade.enable = true;
  # Use the systemd-boot EFI boot loader.
  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;
  networking.hostName = "nixos"; # Define your hostname.
  networking.networkmanager.enable = true;
  #networking.wireless.enable = true;
  #networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.
  #networking.supplicant.wlp2s0.configFile.path = "/etc/wpa_supplicant.conf";
  # All networking devices should use DHCP
  # Can we get this to be automated?
  #networking.interfaces.enp1s0.useDHCP = true;
  #networking.interfaces.wlp2s0.useDHCP = true;
  ##networking.useDHCP = true;
  ##for rkvm
  #networking.firewall.allowedTCPPorts = [
  #  5000
  #];
  networking.firewall.allowedUDPPorts = [ 5000 ];
  services.avahi = {
    enable = true;
    nssmdns = true;
    reflector = true;
  };
  networking.firewall.enable = true;
  i18n.defaultLocale = "en_US.UTF-8";
  # Set your time zone.
  time.timeZone = "US/Central";
  ############## List of Packages Without much configuration ############### 
  # List packages installed in system profile. To search, run:
  # $ nix search wget
  environment.systemPackages = with pkgs; [
    neovim
    mkpasswd
    gnome3.gnome-tweaks
  ];
  ############### DEFAULT ENVIORNMENT VARIABLES ############### 
  environment.variables = { EDITOR = "nvim"; };
  # Enable sound.
  sound.enable = true;
  hardware.pulseaudio.enable = true;
  # Enable the X11 windowing system.
  services.xserver.enable = true;
  services.xserver.displayManager.gdm.enable = true;
  services.xserver.desktopManager.gnome.enable = true;
  services.xserver.layout = "us";
  #printing
  services.printing.enable = true;
  services.printing.drivers = [ pkgs.brlaser ];
  #scanning
  hardware.sane = {
    enable = true;
    extraBackends = [ pkgs.sane-airscan ];
  };
  programs.dconf.enable = true;
  # Enable touchpad support.
  services.xserver.libinput.enable = true;
  # Define a user account. Don't forget to set a password with ‘passwd’.
  users.users.bender = rec {
    home = "/home/bender";
    description = "Arvinder Dhanoa";
    isNormalUser = true;
    extraGroups = [ "wheel" "scanner" "lp" ];
    passwordFile = home + "/.secrets/passwordfile";
  };
  users.mutableUsers = false;
  # This value determines the NixOS release from which the default
  # settings for stateful data, like file locations and database versions
  # on your system were taken. It‘s perfectly fine and recommended to leave
  # this value at the release version of the first install of this system.
  # Before changing this value read the documentation for this option
  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
  system.stateVersion = "20.03"; # Did you read the comment?
}

# Edit this configuration file to define what should be installed on
# your system.  Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’).
{ config, pkgs, ... }:
{
  nix = {
    package = pkgs.nixUnstable;
    extraOptions = ''
      experimental-features = nix-command flakes
    '';
  };
  imports = [ ./hardware-configuration.nix ];
  nixpkgs.config.allowUnfree = true;
  #autoupdates
  system.autoUpgrade.enable = true;
  # Use the systemd-boot EFI boot loader.
  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;
  networking.hostName = "nixos"; # Define your hostname.
  networking.networkmanager.enable = true;
  #networking.wireless.enable = true;
  #networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.
  #networking.supplicant.wlp2s0.configFile.path = "/etc/wpa_supplicant.conf";
  # All networking devices should use DHCP
  # Can we get this to be automated?
  #networking.interfaces.enp1s0.useDHCP = true;
  #networking.interfaces.wlp2s0.useDHCP = true;
  ##networking.useDHCP = true;
  ##for rkvm
  #networking.firewall.allowedTCPPorts = [
  #  5000
  #];
  networking.firewall.allowedUDPPorts = [ 5000 ];
  services.avahi = {
    enable = true;
    nssmdns = true;
    reflector = true;
  };
  networking.firewall.enable = true;
  i18n.defaultLocale = "en_US.UTF-8";
  # Set your time zone.
  time.timeZone = "US/Central";
  ############## List of Packages Without much configuration ############### 
  # List packages installed in system profile. To search, run:
  # $ nix search wget
  environment.systemPackages = with pkgs; [
    neovim
    mkpasswd
    gnome3.gnome-tweaks
  ];
  ############### DEFAULT ENVIORNMENT VARIABLES ############### 
  environment.variables = { EDITOR = "nvim"; };
  # Enable sound.
  sound.enable = true;
  hardware.pulseaudio.enable = true;
  # Enable the X11 windowing system.
  services.xserver.enable = true;
  services.xserver.displayManager.gdm.enable = true;
  services.xserver.desktopManager.gnome.enable = true;
  services.xserver.layout = "us";
  #printing
  services.printing.enable = true;
  services.printing.drivers = [ pkgs.brlaser ];
  #scanning
  hardware.sane = {
    enable = true;
    extraBackends = [ pkgs.sane-airscan ];
  };
  programs.dconf.enable = true;
  # Enable touchpad support.
  services.xserver.libinput.enable = true;
  # Define a user account. Don't forget to set a password with ‘passwd’.
  users.users.bender = rec {
    home = "/home/bender";
    description = "Arvinder Dhanoa";
    isNormalUser = true;
    extraGroups = [ "wheel" "scanner" "lp" ];
    passwordFile = home + "/.secrets/passwordfile";
  };
  users.mutableUsers = false;
  # This value determines the NixOS release from which the default
  # settings for stateful data, like file locations and database versions
  # on your system were taken. It‘s perfectly fine and recommended to leave
  # this value at the release version of the first install of this system.
  # Before changing this value read the documentation for this option
  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
  system.stateVersion = "20.03"; # Did you read the comment?
}

# Do not modify this file!  It was generated by ‘nixos-generate-config’
# and may be overwritten by future invocations.  Please make changes
# to /etc/nixos/configuration.nix instead.
{ config, lib, pkgs, modulesPath, ... }:
{
  imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
  boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "usbhid" "sd_mod" ];
  boot.initrd.kernelModules = [ ];
  boot.kernelModules = [ "kvm-amd" "v4l2loopback"];
  boot.extraModulePackages = [ pkgs.linuxPackages.v4l2loopback ];
  nixpkgs.config.allowUnfree = true;
  fileSystems."/" = {
    device = "/dev/disk/by-uuid/91c3546a-54d1-4c02-bbf6-21394f4934f1";
    fsType = "ext4";
  };
  fileSystems."/boot" = {
    device = "/dev/disk/by-uuid/1688-EC4D";
    fsType = "vfat";
  };
  swapDevices =
    [{ device = "/dev/disk/by-uuid/7a34c74f-aa77-47dc-8e55-be8053268a5b"; }];
}

# Do not modify this file!  It was generated by ‘nixos-generate-config’
# and may be overwritten by future invocations.  Please make changes
# to /etc/nixos/configuration.nix instead.
{ config, lib, pkgs, modulesPath, ... }:
{
  imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
  boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "usbhid" "sd_mod" ];
  boot.initrd.kernelModules = [ ];
  boot.kernelModules = [ "kvm-amd" "v4l2loopback"];
  boot.extraModulePackages = [ pkgs.linuxPackages.v4l2loopback ];
  nixpkgs.config.allowUnfree = true;
  fileSystems."/" = {
    device = "/dev/disk/by-uuid/91c3546a-54d1-4c02-bbf6-21394f4934f1";
    fsType = "ext4";
  };
  fileSystems."/boot" = {
    device = "/dev/disk/by-uuid/1688-EC4D";
    fsType = "vfat";
  };
  swapDevices =
    [{ device = "/dev/disk/by-uuid/7a34c74f-aa77-47dc-8e55-be8053268a5b"; }];
}

# Edit this configuration file to define what should be installed on
# your system.  Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’).
{ config, pkgs, ... }:
{
  nix = {
    package = pkgs.nixUnstable;
    extraOptions = ''
      experimental-features = nix-command flakes
    '';
  };
  imports = [ # Include the results of the hardware scan.
    ./hardware-configuration.nix
  ];
  # Use the GRUB 2 boot loader.
  # boot.loader.grub.enable = true;
  # boot.loader.grub.version = 2;
  # boot.loader.grub.efiSupport = true;
  # boot.loader.grub.efiInstallAsRemovable = true;
  # boot.loader.efi.efiSysMountPoint = "/boot/efi";
  # Define on which hard drive you want to install Grub.
  # boot.loader.grub.device = "/dev/sda"; # or "nodev" for efi only
  boot.loader.systemd-boot.enable = true;
  networking.hostName = "nixos"; # Define your hostname.
  networking.firewall.allowPing = true;
  # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.
  # Set your time zone.
  time.timeZone = "America/Chicago";
  # The global useDHCP flag is deprecated, therefore explicitly set to false here.
  # Per-interface useDHCP will be mandatory in the future, so this generated config
  # replicates the default behaviour.
  networking.useDHCP = false;
  networking.interfaces.enp0s3.useDHCP = true;
  networking.interfaces.enp35s0.useDHCP = true;
  # Configure network proxy if necessary
  # networking.proxy.default = "http://user:password@proxy:port/";
  # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
  # Select internationalisation properties.
  # i18n.defaultLocale = "en_US.UTF-8";
  # console = {
  #   font = "Lat2-Terminus16";
  #   keyMap = "us";
  # };
  # Enable the GNOME 3 Desktop Environment.
  services.xserver.enable = true;
  services.xserver.videoDrivers = ["nvidia"];
  services.xserver.displayManager.gdm.enable = true;
  services.xserver.desktopManager.gnome.enable = true;
  services.gnome.gnome-remote-desktop.enable = true;
  # Configure keymap in X11
  # services.xserver.layout = "us";
  # services.xserver.xkbOptions = "eurosign:e";
  # Enable CUPS to print documents.
  services.printing.enable = true;
  xdg = {
    portal = {
      enable = true;
      extraPortals = [
        pkgs.xdg-desktop-portal-wlr
        pkgs.xdg-desktop-portal-gtk
      ];
    };
  };
  # Enable sound.
  hardware.pulseaudio.enable = false;
  # rtkit is optional but recommended
  security.rtkit.enable = true;
  programs.dconf.enable = true;
  services.pipewire = {
    enable = true;
    alsa.enable = true;
    alsa.support32Bit = true;
    pulse.enable = true;
    # If you want to use JACK applications, uncomment this
    #jack.enable = true;
    # use the example session manager (no others are packaged yet so this is enabled by default,
    # no need to redefine it in your config for now)
    #media-session.enable = true;
  };
  # Enable touchpad support (enabled default in most desktopManager).
  services.xserver.libinput.enable = true;
  # Define a user account. Don't forget to set a password with ‘passwd’.
  users.users.bender = {
    isNormalUser = true;
    extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user.
  };
  # List packages installed in system profile. To search, run:
  # $ nix search wget
  environment.systemPackages = with pkgs; [ wget neovim git linuxPackages.v4l2loopback];
  environment.variables.EDITOR = "nvim";
  # Some programs need SUID wrappers, can be configured further or are
  # started in user sessions.
  programs.mtr.enable = true;
  programs.gnupg.agent = {
    enable = true;
    enableSSHSupport = true;
  };
  # some development thing I made on the spot.
  services.postgresql = {
    enable = true;
    package = pkgs.postgresql_10;
    enableTCPIP = true;
    authentication = pkgs.lib.mkOverride 10 ''
      local all all trust
      host all all ::1/128 trust
      host all all 127.0.0.1/32 trust
    '';
  };
  # List services that you want to enable:
  # Enable the OpenSSH daemon.
  services.openssh.enable = true;
  # Open ports in the firewall.
  # networking.firewall.allowedTCPPorts = [ ... ];
  # networking.firewall.allowedUDPPorts = [ ... ];
  # Or disable the firewall altogether.
  # networking.firewall.enable = false;
  # This value determines the NixOS release from which the default
  # settings for stateful data, like file locations and database versions
  # on your system were taken. It‘s perfectly fine and recommended to leave
  # this value at the release version of the first install of this system.
  # Before changing this value read the documentation for this option
  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
  system.stateVersion = "20.09"; # Did you read the comment?
}

# Edit this configuration file to define what should be installed on
# your system.  Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’).
{ config, pkgs, ... }:
{
  nix = {
    package = pkgs.nixUnstable;
    extraOptions = ''
      experimental-features = nix-command flakes
    '';
  };
  imports = [ # Include the results of the hardware scan.
    ./hardware-configuration.nix
  ];
  # Use the GRUB 2 boot loader.
  # boot.loader.grub.enable = true;
  # boot.loader.grub.version = 2;
  # boot.loader.grub.efiSupport = true;
  # boot.loader.grub.efiInstallAsRemovable = true;
  # boot.loader.efi.efiSysMountPoint = "/boot/efi";
  # Define on which hard drive you want to install Grub.
  # boot.loader.grub.device = "/dev/sda"; # or "nodev" for efi only
  boot.loader.systemd-boot.enable = true;
  networking.hostName = "nixos"; # Define your hostname.
  networking.firewall.allowPing = true;
  # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.
  # Set your time zone.
  time.timeZone = "America/Chicago";
  # The global useDHCP flag is deprecated, therefore explicitly set to false here.
  # Per-interface useDHCP will be mandatory in the future, so this generated config
  # replicates the default behaviour.
  networking.useDHCP = false;
  networking.interfaces.enp0s3.useDHCP = true;
  networking.interfaces.enp35s0.useDHCP = true;
  # Configure network proxy if necessary
  # networking.proxy.default = "http://user:password@proxy:port/";
  # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
  # Select internationalisation properties.
  # i18n.defaultLocale = "en_US.UTF-8";
  # console = {
  #   font = "Lat2-Terminus16";
  #   keyMap = "us";
  # };
  # Enable the GNOME 3 Desktop Environment.
  services.xserver.enable = true;
  services.xserver.videoDrivers = ["nvidia"];
  services.xserver.displayManager.gdm.enable = true;
  services.xserver.desktopManager.gnome.enable = true;
  services.gnome.gnome-remote-desktop.enable = true;
  # Configure keymap in X11
  # services.xserver.layout = "us";
  # services.xserver.xkbOptions = "eurosign:e";
  # Enable CUPS to print documents.
  services.printing.enable = true;
  xdg = {
    portal = {
      enable = true;
      extraPortals = [
        pkgs.xdg-desktop-portal-wlr
        pkgs.xdg-desktop-portal-gtk
      ];
    };
  };
  # Enable sound.
  hardware.pulseaudio.enable = false;
  # rtkit is optional but recommended
  security.rtkit.enable = true;
  programs.dconf.enable = true;
  services.pipewire = {
    enable = true;
    alsa.enable = true;
    alsa.support32Bit = true;
    pulse.enable = true;
    # If you want to use JACK applications, uncomment this
    #jack.enable = true;
    # use the example session manager (no others are packaged yet so this is enabled by default,
    # no need to redefine it in your config for now)
    #media-session.enable = true;
  };
  # Enable touchpad support (enabled default in most desktopManager).
  services.xserver.libinput.enable = true;
  # Define a user account. Don't forget to set a password with ‘passwd’.
  users.users.bender = {
    isNormalUser = true;
    extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user.
  };
  # List packages installed in system profile. To search, run:
  # $ nix search wget
  environment.systemPackages = with pkgs; [ wget neovim git linuxPackages.v4l2loopback];
  environment.variables.EDITOR = "nvim";
  # Some programs need SUID wrappers, can be configured further or are
  # started in user sessions.
  programs.mtr.enable = true;
  programs.gnupg.agent = {
    enable = true;
    enableSSHSupport = true;
  };
  # some development thing I made on the spot.
  services.postgresql = {
    enable = true;
    package = pkgs.postgresql_10;
    enableTCPIP = true;
    authentication = pkgs.lib.mkOverride 10 ''
      local all all trust
      host all all ::1/128 trust
      host all all 127.0.0.1/32 trust
    '';
  };
  # List services that you want to enable:
  # Enable the OpenSSH daemon.
  services.openssh.enable = true;
  # Open ports in the firewall.
  # networking.firewall.allowedTCPPorts = [ ... ];
  # networking.firewall.allowedUDPPorts = [ ... ];
  # Or disable the firewall altogether.
  # networking.firewall.enable = false;
  # This value determines the NixOS release from which the default
  # settings for stateful data, like file locations and database versions
  # on your system were taken. It‘s perfectly fine and recommended to leave
  # this value at the release version of the first install of this system.
  # Before changing this value read the documentation for this option
  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
  system.stateVersion = "20.09"; # Did you read the comment?
}

OdVMF/vEnyFYAOYU8Rfl+0ubW14TVfZUU5HGUV8sGzY=

OdVMF/vEnyFYAOYU8Rfl+0ubW14TVfZUU5HGUV8sGzY=

let 
  coding_server = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIuYCV7NwqlACA5rp8WH4lerKB8M9Ci3jucyW0hhQLfD"; 
in {
  "wireguard/private.key".publicKeys = [coding_server];
  "dyndns/password.priv".publicKeys = [coding_server];
}

let 
  coding_server = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIuYCV7NwqlACA5rp8WH4lerKB8M9Ci3jucyW0hhQLfD"; 
in {
  "wireguard/private.key".publicKeys = [coding_server];
  "dyndns/password.priv".publicKeys = [coding_server];
}

{
  description = "My home configuration.";
  inputs = {
    nixpkgs.url = "github:nixos/nixpkgs/nixos-21.11";
    home-manager.url = "github:nix-community/home-manager/release-21.11";
    nixpkgs-master.url = "github:nixos/nixpkgs/master";
    nixpkgs-unstable.url = "github:nixos/nixpkgs/nixos-unstable";
    agenix.url = "github:ryantm/agenix";
  };
  outputs = {self, home-manager, nixpkgs, nixpkgs-master, nixpkgs-unstable, agenix, ... }:
    let
      baseModules = overlays: [
        (home-manager.nixosModules.home-manager)
        {
          config = {
            home-manager.users.bender = import ./bender/home.nix;
            home-manager.useGlobalPkgs = true;
            home-manager.useUserPackages = true;
            nixpkgs.overlays = import ./bender/overlays ++ [ overlays ];
          };
        }
        agenix.nixosModules.age
      ];
    in {
      overlay = final: prev: { 
        nixpkgs-master = nixpkgs-master.legacyPackages."x86_64-linux"; 
        nixpkgs-unstable = nixpkgs-unstable.legacyPackages."x86_64-linux"; 
      };
      nixosConfigurations.desktop = (nixpkgs.lib.nixosSystem {
        system = "x86_64-linux";
        modules = baseModules self.overlay ++ [ ./system/desktop/configuration.nix ];
      });
      nixosConfigurations.laptop = (nixpkgs.lib.nixosSystem {
        system = "x86_64-linux";
        modules = baseModules self.overlay ++ [ ./system/laptop/configuration.nix ];
      });
      nixosConfigurations.work_vm = (nixpkgs.lib.nixosSystem {
        system = "x86_64-linux";
        modules = baseModules self.overlay ++ [ ./system/work_vm/configuration.nix ];
      });
      nixosConfigurations.wireguard_server = (nixpkgs.lib.nixosSystem {
        system = "x86_64-linux";
        modules = baseModules self.overlay ++ [ ./system/wireguard_server/configuration.nix ];
      });
    };
}

{
  description = "My home configuration.";
  inputs = {
    nixpkgs.url = "github:nixos/nixpkgs/nixos-21.11";
    home-manager.url = "github:nix-community/home-manager/release-21.11";
    nixpkgs-master.url = "github:nixos/nixpkgs/master";
    nixpkgs-unstable.url = "github:nixos/nixpkgs/nixos-unstable";
    agenix.url = "github:ryantm/agenix";
  };
  outputs = {self, home-manager, nixpkgs, nixpkgs-master, nixpkgs-unstable, agenix, ... }:
    let
      baseModules = overlays: [
        (home-manager.nixosModules.home-manager)
        {
          config = {
            home-manager.users.bender = import ./bender/home.nix;
            home-manager.useGlobalPkgs = true;
            home-manager.useUserPackages = true;
            nixpkgs.overlays = import ./bender/overlays ++ [ overlays ];
          };
        }
        agenix.nixosModules.age
      ];
    in {
      overlay = final: prev: { 
        nixpkgs-master = nixpkgs-master.legacyPackages."x86_64-linux"; 
        nixpkgs-unstable = nixpkgs-unstable.legacyPackages."x86_64-linux"; 
      };
      nixosConfigurations.desktop = (nixpkgs.lib.nixosSystem {
        system = "x86_64-linux";
        modules = baseModules self.overlay ++ [ ./system/desktop/configuration.nix ];
      });
      nixosConfigurations.laptop = (nixpkgs.lib.nixosSystem {
        system = "x86_64-linux";
        modules = baseModules self.overlay ++ [ ./system/laptop/configuration.nix ];
      });
      nixosConfigurations.work_vm = (nixpkgs.lib.nixosSystem {
        system = "x86_64-linux";
        modules = baseModules self.overlay ++ [ ./system/work_vm/configuration.nix ];
      });
      nixosConfigurations.wireguard_server = (nixpkgs.lib.nixosSystem {
        system = "x86_64-linux";
        modules = baseModules self.overlay ++ [ ./system/wireguard_server/configuration.nix ];
      });
    };
}

{
  inputs.nixpkgs.url = "github:NixOS/nixpkgs/nixos-20.03";
  outputs = { self, nixpkgs }: {
    nixosConfigurations.container = nixpkgs.lib.nixosSystem {
      system = "x86_64-linux";
      modules = [
        ({ pkgs, ... }@inputs:
          import ./configuration.nix (inputs // { flake = self; }))
      ];
    };
  };
}

{
  inputs.nixpkgs.url = "github:NixOS/nixpkgs/nixos-20.03";
  outputs = { self, nixpkgs }: {
    nixosConfigurations.container = nixpkgs.lib.nixosSystem {
      system = "x86_64-linux";
      modules = [
        ({ pkgs, ... }@inputs:
          import ./configuration.nix (inputs // { flake = self; }))
      ];
    };
  };
}

{
  "nodes": {
    "nixpkgs": {
      "locked": {
        "lastModified": 1620055814,
        "narHash": "sha256-8LEHoYSJiL901bTMVatq+rf8y7QtWuZhwwpKE2fyaRY=",
        "owner": "NixOS",
        "repo": "nixpkgs",
        "rev": "1db42b7fe3878f3f5f7a4f2dc210772fd080e205",
        "type": "github"
      },
      "original": {
        "owner": "NixOS",
        "ref": "nixos-20.03",
        "repo": "nixpkgs",
        "type": "github"
      }
    },
    "root": {
      "inputs": {
        "nixpkgs": "nixpkgs"
      }
    }
  },
  "root": "root",
  "version": 7
}

{
  "nodes": {
    "nixpkgs": {
      "locked": {
        "lastModified": 1620055814,
        "narHash": "sha256-8LEHoYSJiL901bTMVatq+rf8y7QtWuZhwwpKE2fyaRY=",
        "owner": "NixOS",
        "repo": "nixpkgs",
        "rev": "1db42b7fe3878f3f5f7a4f2dc210772fd080e205",
        "type": "github"
      },
      "original": {
        "owner": "NixOS",
        "ref": "nixos-20.03",
        "repo": "nixpkgs",
        "type": "github"
      }
    },
    "root": {
      "inputs": {
        "nixpkgs": "nixpkgs"
      }
    }
  },
  "root": "root",
  "version": 7
}

({ pkgs, flake, ... }: {
  boot.isContainer = true;
  # Let 'nixos-version --json' know about the Git revision
  # of this flake.
  system.configurationRevision = pkgs.lib.mkIf (flake ? rev) flake.rev;
  environment.systemPackages = with pkgs; [ wireguard ];
  # Network configuration.
  networking.useDHCP = false;
  networking.firewall.allowedUDPPorts = [ 51820 ];
  networking.nat.enable = true;
  networking.nat.externalInterface = "wlan0";
  networking.nat.internalInterfaces = [ "wg0" ];
  networking.wireguard.interfaces = {
    wg0 = {
      ips = [ "10.0.0.1/24" ];
      listenPort = 51820;
      postSetup = ''
        ${pkgs.iptables}/bin/iptables -t nat -A POSTROUTING -s 10.100.0.0/24 -o eth0 -j MASQUERADE
      '';
      postShutdown = ''
        ${pkgs.iptables}/bin/iptables -t nat -D POSTROUTING -s 10.100.0.0/24 -o eth0 -j MASQUERADE
      '';
      privateKeyFile = ".private";
      peers = [{
        publicKey = "mkH6f0LZM8oiMw6bRVkzhcw/OibwtENkR0WnQZYz1nQ=";
        allowedIPs = [ "10.1.0.0/32" ];
      }];
    };
  };
})

({ pkgs, flake, ... }: {
  boot.isContainer = true;
  # Let 'nixos-version --json' know about the Git revision
  # of this flake.
  system.configurationRevision = pkgs.lib.mkIf (flake ? rev) flake.rev;
  environment.systemPackages = with pkgs; [ wireguard ];
  # Network configuration.
  networking.useDHCP = false;
  networking.firewall.allowedUDPPorts = [ 51820 ];
  networking.nat.enable = true;
  networking.nat.externalInterface = "wlan0";
  networking.nat.internalInterfaces = [ "wg0" ];
  networking.wireguard.interfaces = {
    wg0 = {
      ips = [ "10.0.0.1/24" ];
      listenPort = 51820;
      postSetup = ''
        ${pkgs.iptables}/bin/iptables -t nat -A POSTROUTING -s 10.100.0.0/24 -o eth0 -j MASQUERADE
      '';
      postShutdown = ''
        ${pkgs.iptables}/bin/iptables -t nat -D POSTROUTING -s 10.100.0.0/24 -o eth0 -j MASQUERADE
      '';
      privateKeyFile = ".private";
      peers = [{
        publicKey = "mkH6f0LZM8oiMw6bRVkzhcw/OibwtENkR0WnQZYz1nQ=";
        allowedIPs = [ "10.1.0.0/32" ];
      }];
    };
  };
})

# from https://github.com/mozilla/nixpkgs-mozilla/blob/master/rust-overlay.nix
# This file provide a Rust overlay, which provides pre-packaged bleeding edge versions of rustc
# and cargo.
self: super:
let
  fromTOML =
    # nix 2.1 added the fromTOML builtin
    if builtins ? fromTOML then
      builtins.fromTOML
    else
      (import ./lib/parseTOML.nix).fromTOML;
  # Function that takes in a file, and 
  # returns an empty set if file is null, or
  # returns a set with channel and date.
  parseRustToolchain = file:
    with builtins;
    if file == null then
      { }
    else
      let
        # matches toolchain descriptions of type "nightly" or "nightly-2020-01-01"
        channel_by_name =
          match "([a-z]+)(-([0-9]{4}-[0-9]{2}-[0-9]{2}))?.*" (readFile file);
        # matches toolchain descriptions of type "1.34.0" or "1.34.0-2019-04-10"
        channel_by_version =
          match "([0-9]+\\.[0-9]+\\.[0-9]+)(-([0-9]{4}-[0-9]{2}-[0-9]{2}))?.*"
          (readFile file);
      in (x: {
        channel = head x;
        date = (head (tail (tail x)));
      })
      (if channel_by_name != null then channel_by_name else channel_by_version);
  # See https://github.com/rust-lang-nursery/rustup.rs/blob/master/src/dist/src/dist.rs
  defaultDistRoot = "https://static.rust-lang.org";
  manifest_v1_url = { dist_root ? defaultDistRoot + "/dist", date ? null
    , staging ? false,
    # A channel can be "nightly", "beta", "stable", or "\d{1}\.\d{1,3}\.\d{1,2}".
    channel ? "nightly",
    # A path that points to a rust-toolchain file, typically ./rust-toolchain.
    rustToolchain ? null, ... }:
    let args = { inherit channel date; } // parseRustToolchain rustToolchain;
    in let inherit (args) date channel;
    in if date == null && staging == false then
      "${dist_root}/channel-rust-${channel}"
    else if date != null && staging == false then
      "${dist_root}/${date}/channel-rust-${channel}"
    else if date == null && staging == true then
      "${dist_root}/staging/channel-rust-${channel}"
    else
      throw "not a real-world case";
  manifest_v2_url = args: (manifest_v1_url args) + ".toml";
  getComponentsWithFixedPlatform = pkgs: pkgname: stdenv:
    let
      pkg = pkgs.${pkgname};
      srcInfo = pkg.target.${
          super.rust.toRustTarget stdenv.targetPlatform
        } or pkg.target."*";
      components = srcInfo.components or [ ];
      componentNamesList = builtins.map (pkg: pkg.pkg)
        (builtins.filter (pkg: (pkg.target != "*")) components);
    in componentNamesList;
  getExtensions = pkgs: pkgname: stdenv:
    let
      inherit (super.lib) unique;
      pkg = pkgs.${pkgname};
      srcInfo = pkg.target.${
          super.rust.toRustTarget stdenv.targetPlatform
        } or pkg.target."*";
      extensions = srcInfo.extensions or [ ];
      extensionNamesList = unique (builtins.map (pkg: pkg.pkg) extensions);
    in extensionNamesList;
  hasTarget = pkgs: pkgname: target: pkgs ? ${pkgname}.target.${target};
  getTuples = pkgs: name: targets:
    builtins.map (target: { inherit name target; })
    (builtins.filter (target: hasTarget pkgs name target) targets);
  # In the manifest, a package might have different components which are bundled with it, as opposed as the extensions which can be added.
  # By default, a package will include the components for the same architecture, and offers them as extensions for other architectures.
  #
  # This functions returns a list of { name, target } attribute sets, which includes the current system package, and all its components for the selected targets.
  # The list contains the package for the pkgTargets as well as the packages for components for all compTargets
  getTargetPkgTuples = pkgs: pkgname: pkgTargets: compTargets: stdenv:
    let
      inherit (builtins) elem;
      inherit (super.lib) intersectLists;
      components = getComponentsWithFixedPlatform pkgs pkgname stdenv;
      extensions = getExtensions pkgs pkgname stdenv;
      compExtIntersect = intersectLists components extensions;
      tuples = (getTuples pkgs pkgname pkgTargets)
        ++ (builtins.map (name: getTuples pkgs name compTargets)
          compExtIntersect);
    in tuples;
  getFetchUrl = pkgs: pkgname: target: stdenv: fetchurl:
    let
      pkg = pkgs.${pkgname};
      srcInfo = pkg.target.${target};
    in (super.fetchurl {
      url = srcInfo.xz_url;
      sha256 = srcInfo.xz_hash;
    });
  checkMissingExtensions = pkgs: pkgname: stdenv: extensions:
    let
      inherit (builtins) head;
      inherit (super.lib) concatStringsSep subtractLists;
      availableExtensions = getExtensions pkgs pkgname stdenv;
      missingExtensions = subtractLists availableExtensions extensions;
      extensionsToInstall = if missingExtensions == [ ] then
        extensions
      else
        throw ''
          While compiling ${pkgname}: the extension ${
            head missingExtensions
          } is not available.
          Select extensions from the following list:
          ${concatStringsSep "\n" availableExtensions}'';
    in extensionsToInstall;
  getComponents =
    pkgs: pkgname: targets: extensions: targetExtensions: stdenv: fetchurl:
    let
      inherit (builtins) head map;
      inherit (super.lib) flatten remove subtractLists unique;
      targetExtensionsToInstall =
        checkMissingExtensions pkgs pkgname stdenv targetExtensions;
      extensionsToInstall =
        checkMissingExtensions pkgs pkgname stdenv extensions;
      hostTargets = [
        "*"
        (super.rust.toRustTarget stdenv.hostPlatform)
        (super.rust.toRustTarget stdenv.targetPlatform)
      ];
      pkgTuples =
        flatten (getTargetPkgTuples pkgs pkgname hostTargets targets stdenv);
      extensionTuples = flatten
        (map (name: getTargetPkgTuples pkgs name hostTargets targets stdenv)
          extensionsToInstall);
      targetExtensionTuples = flatten
        (map (name: getTargetPkgTuples pkgs name targets targets stdenv)
          targetExtensionsToInstall);
      pkgsTuples = pkgTuples ++ extensionTuples ++ targetExtensionTuples;
      missingTargets = subtractLists (map (tuple: tuple.target) pkgsTuples)
        (remove "*" targets);
      pkgsTuplesToInstall = if missingTargets == [ ] then
        pkgsTuples
      else
        throw "While compiling ${pkgname}: the target ${
          head missingTargets
        } is not available for any package.";
    in map (tuple: {
      name = tuple.name;
      src = (getFetchUrl pkgs tuple.name tuple.target stdenv fetchurl);
    }) pkgsTuplesToInstall;
  installComponents = stdenv: namesAndSrcs:
    let
      inherit (builtins) map;
      installComponent = name: src:
        stdenv.mkDerivation {
          inherit name;
          inherit src;
          # No point copying src to a build server, then copying back the
          # entire unpacked contents after just a little twiddling.
          preferLocalBuild = true;
          # (@nbp) TODO: Check on Windows and Mac.
          # This code is inspired by patchelf/setup-hook.sh to iterate over all binaries.
          installPhase = ''
            patchShebangs install.sh
            CFG_DISABLE_LDCONFIG=1 ./install.sh --prefix=$out --verbose
            setInterpreter() {
              local dir="$1"
              [ -e "$dir" ] || return 0
              header "Patching interpreter of ELF executables and libraries in $dir"
              local i
              while IFS= read -r -d $'\0' i; do
                if [[ "$i" =~ .build-id ]]; then continue; fi
                if ! isELF "$i"; then continue; fi
                echo "setting interpreter of $i"
                
                if [[ -x "$i" ]]; then
                  # Handle executables
                  patchelf \
                    --set-interpreter "$(cat $NIX_CC/nix-support/dynamic-linker)" \
                    --set-rpath "${
                      super.lib.makeLibraryPath [ self.zlib ]
                    }:$out/lib" \
                    "$i" || true
                else
                  # Handle libraries
                  patchelf \
                    --set-rpath "${
                      super.lib.makeLibraryPath [ self.zlib ]
                    }:$out/lib" \
                    "$i" || true
                fi
              done < <(find "$dir" -type f -print0)
            }
            setInterpreter $out
          '';
          postFixup = ''
            # Function moves well-known files from etc/
            handleEtc() {
              local oldIFS="$IFS"
              # Directories we are aware of, given as substitution lists
              for paths in \
                "etc/bash_completion.d","share/bash_completion/completions","etc/bash_completions.d","share/bash_completions/completions";
                do
                # Some directoties may be missing in some versions. If so we just skip them.
                # See https://github.com/mozilla/nixpkgs-mozilla/issues/48 for more infomation.
                if [ ! -e $paths ]; then continue; fi
                IFS=","
                set -- $paths
                IFS="$oldIFS"
                local orig_path="$1"
                local wanted_path="$2"
                # Rename the files
                if [ -d ./"$orig_path" ]; then
                  mkdir -p "$(dirname ./"$wanted_path")"
                fi
                mv -v ./"$orig_path" ./"$wanted_path"
                # Fail explicitly if etc is not empty so we can add it to the list and/or report it upstream
                rmdir ./etc || {
                  echo Installer tries to install to /etc:
                  find ./etc
                  exit 1
                }
              done
            }
            if [ -d "$out"/etc ]; then
              pushd "$out"
              handleEtc
              popd
            fi
          '';
          dontStrip = true;
        };
    in map (nameAndSrc: (installComponent nameAndSrc.name nameAndSrc.src))
    namesAndSrcs;
  # Manifest files are organized as follow:
  # { date = "2017-03-03";
  #   pkg.cargo.version= "0.18.0-nightly (5db6d64 2017-03-03)";
  #   pkg.cargo.target.x86_64-unknown-linux-gnu = {
  #     available = true;
  #     hash = "abce..."; # sha256
  #     url = "https://static.rust-lang.org/dist/....tar.gz";
  #     xz_hash = "abce..."; # sha256
  #     xz_url = "https://static.rust-lang.org/dist/....tar.xz";
  #   };
  # }
  #
  # The packages available usually are:
  #   cargo, rust-analysis, rust-docs, rust-src, rust-std, rustc, and
  #   rust, which aggregates them in one package.
  #
  # For each package the following options are available:
  #   extensions        - The extensions that should be installed for the package.
  #                       For example, install the package rust and add the extension rust-src.
  #   targets           - The package will always be installed for the host system, but with this option
  #                       extra targets can be specified, e.g. "mips-unknown-linux-musl". The target
  #                       will only apply to components of the package that support being installed for
  #                       a different architecture. For example, the rust package will install rust-std
  #                       for the host system and the targets.
  #   targetExtensions  - If you want to force extensions to be installed for the given targets, this is your option.
  #                       All extensions in this list will be installed for the target architectures.
  #                       *Attention* If you want to install an extension like rust-src, that has no fixed architecture (arch *),
  #                       you will need to specify this extension in the extensions options or it will not be installed!
  fromManifestFile = manifest:
    { stdenv, fetchurl, patchelf }:
    let
      inherit (builtins) elemAt;
      inherit (super) makeOverridable;
      inherit (super.lib) flip mapAttrs;
      pkgs = fromTOML (builtins.readFile manifest);
    in flip mapAttrs pkgs.pkg (name: pkg:
      makeOverridable ({ extensions, targets, targetExtensions }:
        let
          version' = builtins.match "([^ ]*) [(]([^ ]*) ([^ ]*)[)]" pkg.version;
          version =
            "${elemAt version' 0}-${elemAt version' 2}-${elemAt version' 1}";
          namesAndSrcs =
            getComponents pkgs.pkg name targets extensions targetExtensions
            stdenv fetchurl;
          components = installComponents stdenv namesAndSrcs;
          componentsOuts = builtins.map (comp:
            (super.lib.strings.escapeNixString
              (super.lib.getOutput "out" comp))) components;
        in super.pkgs.symlinkJoin {
          name = name + "-" + version;
          paths = components;
          postBuild = ''
            # If rustc or rustdoc is in the derivation, we need to copy their
            # executable into the final derivation. This is required
            # for making them find the correct SYSROOT.
            for target in $out/bin/{rustc,rustdoc}; do
              if [ -e $target ]; then
                cp --remove-destination "$(realpath -e $target)" $target
              fi
            done
          '';
          # Add the compiler as part of the propagated build inputs in order
          # to run:
          #
          #    $ nix-shell -p rustChannels.stable.rust
          #
          # And get a fully working Rust compiler, with the stdenv linker.
          propagatedBuildInputs = [ stdenv.cc ];
          meta.platforms = stdenv.lib.platforms.all;
        }) {
          extensions = [ ];
          targets = [ ];
          targetExtensions = [ ];
        });
  fromManifest = sha256: manifest:
    { stdenv, fetchurl, patchelf }:
    let
      manifestFile = if sha256 == null then
        builtins.fetchurl manifest
      else
        fetchurl {
          url = manifest;
          inherit sha256;
        };
    in fromManifestFile manifestFile { inherit stdenv fetchurl patchelf; };
in rec {
  lib = super.lib // {
    inherit fromTOML;
    rustLib = { inherit fromManifest fromManifestFile manifest_v2_url; };
  };
  rustChannelOf = { sha256 ? null, ... }@manifest_args:
    fromManifest sha256 (manifest_v2_url manifest_args) {
      inherit (self) stdenv fetchurl patchelf;
    };
  # Set of packages which are automagically updated. Do not rely on these for
  # reproducible builds.
  latest = (super.latest or { }) // {
    rustChannels = {
      nightly = rustChannelOf { channel = "nightly"; };
      beta = rustChannelOf { channel = "beta"; };
      stable = rustChannelOf { channel = "stable"; };
    };
  };
  # Helper builder
  rustChannelOfTargets = channel: date: targets:
    (rustChannelOf { inherit channel date; }).rust.override {
      inherit targets;
    };
  # For backward compatibility
  rustChannels = latest.rustChannels;
  # For each channel:
  #   latest.rustChannels.nightly.cargo
  #   latest.rustChannels.nightly.rust   # Aggregate all others. (recommended)
  #   latest.rustChannels.nightly.rustc
  #   latest.rustChannels.nightly.rust-analysis
  #   latest.rustChannels.nightly.rust-docs
  #   latest.rustChannels.nightly.rust-src
  #   latest.rustChannels.nightly.rust-std
  # For a specific date:
  #   (rustChannelOf { date = "2017-06-06"; channel = "beta"; }).rust
}

# from https://github.com/mozilla/nixpkgs-mozilla/blob/master/rust-overlay.nix
# This file provide a Rust overlay, which provides pre-packaged bleeding edge versions of rustc
# and cargo.
self: super:
let
  fromTOML =
    # nix 2.1 added the fromTOML builtin
    if builtins ? fromTOML then
      builtins.fromTOML
    else
      (import ./lib/parseTOML.nix).fromTOML;
  # Function that takes in a file, and 
  # returns an empty set if file is null, or
  # returns a set with channel and date.
  parseRustToolchain = file:
    with builtins;
    if file == null then
      { }
    else
      let
        # matches toolchain descriptions of type "nightly" or "nightly-2020-01-01"
        channel_by_name =
          match "([a-z]+)(-([0-9]{4}-[0-9]{2}-[0-9]{2}))?.*" (readFile file);
        # matches toolchain descriptions of type "1.34.0" or "1.34.0-2019-04-10"
        channel_by_version =
          match "([0-9]+\\.[0-9]+\\.[0-9]+)(-([0-9]{4}-[0-9]{2}-[0-9]{2}))?.*"
          (readFile file);
      in (x: {
        channel = head x;
        date = (head (tail (tail x)));
      })
      (if channel_by_name != null then channel_by_name else channel_by_version);
  # See https://github.com/rust-lang-nursery/rustup.rs/blob/master/src/dist/src/dist.rs
  defaultDistRoot = "https://static.rust-lang.org";
  manifest_v1_url = { dist_root ? defaultDistRoot + "/dist", date ? null
    , staging ? false,
    # A channel can be "nightly", "beta", "stable", or "\d{1}\.\d{1,3}\.\d{1,2}".
    channel ? "nightly",
    # A path that points to a rust-toolchain file, typically ./rust-toolchain.
    rustToolchain ? null, ... }:
    let args = { inherit channel date; } // parseRustToolchain rustToolchain;
    in let inherit (args) date channel;
    in if date == null && staging == false then
      "${dist_root}/channel-rust-${channel}"
    else if date != null && staging == false then
      "${dist_root}/${date}/channel-rust-${channel}"
    else if date == null && staging == true then
      "${dist_root}/staging/channel-rust-${channel}"
    else
      throw "not a real-world case";
  manifest_v2_url = args: (manifest_v1_url args) + ".toml";
  getComponentsWithFixedPlatform = pkgs: pkgname: stdenv:
    let
      pkg = pkgs.${pkgname};
      srcInfo = pkg.target.${
          super.rust.toRustTarget stdenv.targetPlatform
        } or pkg.target."*";
      components = srcInfo.components or [ ];
      componentNamesList = builtins.map (pkg: pkg.pkg)
        (builtins.filter (pkg: (pkg.target != "*")) components);
    in componentNamesList;
  getExtensions = pkgs: pkgname: stdenv:
    let
      inherit (super.lib) unique;
      pkg = pkgs.${pkgname};
      srcInfo = pkg.target.${
          super.rust.toRustTarget stdenv.targetPlatform
        } or pkg.target."*";
      extensions = srcInfo.extensions or [ ];
      extensionNamesList = unique (builtins.map (pkg: pkg.pkg) extensions);
    in extensionNamesList;
  hasTarget = pkgs: pkgname: target: pkgs ? ${pkgname}.target.${target};
  getTuples = pkgs: name: targets:
    builtins.map (target: { inherit name target; })
    (builtins.filter (target: hasTarget pkgs name target) targets);
  # In the manifest, a package might have different components which are bundled with it, as opposed as the extensions which can be added.
  # By default, a package will include the components for the same architecture, and offers them as extensions for other architectures.
  #
  # This functions returns a list of { name, target } attribute sets, which includes the current system package, and all its components for the selected targets.
  # The list contains the package for the pkgTargets as well as the packages for components for all compTargets
  getTargetPkgTuples = pkgs: pkgname: pkgTargets: compTargets: stdenv:
    let
      inherit (builtins) elem;
      inherit (super.lib) intersectLists;
      components = getComponentsWithFixedPlatform pkgs pkgname stdenv;
      extensions = getExtensions pkgs pkgname stdenv;
      compExtIntersect = intersectLists components extensions;
      tuples = (getTuples pkgs pkgname pkgTargets)
        ++ (builtins.map (name: getTuples pkgs name compTargets)
          compExtIntersect);
    in tuples;
  getFetchUrl = pkgs: pkgname: target: stdenv: fetchurl:
    let
      pkg = pkgs.${pkgname};
      srcInfo = pkg.target.${target};
    in (super.fetchurl {
      url = srcInfo.xz_url;
      sha256 = srcInfo.xz_hash;
    });
  checkMissingExtensions = pkgs: pkgname: stdenv: extensions:
    let
      inherit (builtins) head;
      inherit (super.lib) concatStringsSep subtractLists;
      availableExtensions = getExtensions pkgs pkgname stdenv;
      missingExtensions = subtractLists availableExtensions extensions;
      extensionsToInstall = if missingExtensions == [ ] then
        extensions
      else
        throw ''
          While compiling ${pkgname}: the extension ${
            head missingExtensions
          } is not available.
          Select extensions from the following list:
          ${concatStringsSep "\n" availableExtensions}'';
    in extensionsToInstall;
  getComponents =
    pkgs: pkgname: targets: extensions: targetExtensions: stdenv: fetchurl:
    let
      inherit (builtins) head map;
      inherit (super.lib) flatten remove subtractLists unique;
      targetExtensionsToInstall =
        checkMissingExtensions pkgs pkgname stdenv targetExtensions;
      extensionsToInstall =
        checkMissingExtensions pkgs pkgname stdenv extensions;
      hostTargets = [
        "*"
        (super.rust.toRustTarget stdenv.hostPlatform)
        (super.rust.toRustTarget stdenv.targetPlatform)
      ];
      pkgTuples =
        flatten (getTargetPkgTuples pkgs pkgname hostTargets targets stdenv);
      extensionTuples = flatten
        (map (name: getTargetPkgTuples pkgs name hostTargets targets stdenv)
          extensionsToInstall);
      targetExtensionTuples = flatten
        (map (name: getTargetPkgTuples pkgs name targets targets stdenv)
          targetExtensionsToInstall);
      pkgsTuples = pkgTuples ++ extensionTuples ++ targetExtensionTuples;
      missingTargets = subtractLists (map (tuple: tuple.target) pkgsTuples)
        (remove "*" targets);
      pkgsTuplesToInstall = if missingTargets == [ ] then
        pkgsTuples
      else
        throw "While compiling ${pkgname}: the target ${
          head missingTargets
        } is not available for any package.";
    in map (tuple: {
      name = tuple.name;
      src = (getFetchUrl pkgs tuple.name tuple.target stdenv fetchurl);
    }) pkgsTuplesToInstall;
  installComponents = stdenv: namesAndSrcs:
    let
      inherit (builtins) map;
      installComponent = name: src:
        stdenv.mkDerivation {
          inherit name;
          inherit src;
          # No point copying src to a build server, then copying back the
          # entire unpacked contents after just a little twiddling.
          preferLocalBuild = true;
          # (@nbp) TODO: Check on Windows and Mac.
          # This code is inspired by patchelf/setup-hook.sh to iterate over all binaries.
          installPhase = ''
            patchShebangs install.sh
            CFG_DISABLE_LDCONFIG=1 ./install.sh --prefix=$out --verbose
            setInterpreter() {
              local dir="$1"
              [ -e "$dir" ] || return 0
              header "Patching interpreter of ELF executables and libraries in $dir"
              local i
              while IFS= read -r -d $'\0' i; do
                if [[ "$i" =~ .build-id ]]; then continue; fi
                if ! isELF "$i"; then continue; fi
                echo "setting interpreter of $i"
                
                if [[ -x "$i" ]]; then
                  # Handle executables
                  patchelf \
                    --set-interpreter "$(cat $NIX_CC/nix-support/dynamic-linker)" \
                    --set-rpath "${
                      super.lib.makeLibraryPath [ self.zlib ]
                    }:$out/lib" \
                    "$i" || true
                else
                  # Handle libraries
                  patchelf \
                    --set-rpath "${
                      super.lib.makeLibraryPath [ self.zlib ]
                    }:$out/lib" \
                    "$i" || true
                fi
              done < <(find "$dir" -type f -print0)
            }
            setInterpreter $out
          '';
          postFixup = ''
            # Function moves well-known files from etc/
            handleEtc() {
              local oldIFS="$IFS"
              # Directories we are aware of, given as substitution lists
              for paths in \
                "etc/bash_completion.d","share/bash_completion/completions","etc/bash_completions.d","share/bash_completions/completions";
                do
                # Some directoties may be missing in some versions. If so we just skip them.
                # See https://github.com/mozilla/nixpkgs-mozilla/issues/48 for more infomation.
                if [ ! -e $paths ]; then continue; fi
                IFS=","
                set -- $paths
                IFS="$oldIFS"
                local orig_path="$1"
                local wanted_path="$2"
                # Rename the files
                if [ -d ./"$orig_path" ]; then
                  mkdir -p "$(dirname ./"$wanted_path")"
                fi
                mv -v ./"$orig_path" ./"$wanted_path"
                # Fail explicitly if etc is not empty so we can add it to the list and/or report it upstream
                rmdir ./etc || {
                  echo Installer tries to install to /etc:
                  find ./etc
                  exit 1
                }
              done
            }
            if [ -d "$out"/etc ]; then
              pushd "$out"
              handleEtc
              popd
            fi
          '';
          dontStrip = true;
        };
    in map (nameAndSrc: (installComponent nameAndSrc.name nameAndSrc.src))
    namesAndSrcs;
  # Manifest files are organized as follow:
  # { date = "2017-03-03";
  #   pkg.cargo.version= "0.18.0-nightly (5db6d64 2017-03-03)";
  #   pkg.cargo.target.x86_64-unknown-linux-gnu = {
  #     available = true;
  #     hash = "abce..."; # sha256
  #     url = "https://static.rust-lang.org/dist/....tar.gz";
  #     xz_hash = "abce..."; # sha256
  #     xz_url = "https://static.rust-lang.org/dist/....tar.xz";
  #   };
  # }
  #
  # The packages available usually are:
  #   cargo, rust-analysis, rust-docs, rust-src, rust-std, rustc, and
  #   rust, which aggregates them in one package.
  #
  # For each package the following options are available:
  #   extensions        - The extensions that should be installed for the package.
  #                       For example, install the package rust and add the extension rust-src.
  #   targets           - The package will always be installed for the host system, but with this option
  #                       extra targets can be specified, e.g. "mips-unknown-linux-musl". The target
  #                       will only apply to components of the package that support being installed for
  #                       a different architecture. For example, the rust package will install rust-std
  #                       for the host system and the targets.
  #   targetExtensions  - If you want to force extensions to be installed for the given targets, this is your option.
  #                       All extensions in this list will be installed for the target architectures.
  #                       *Attention* If you want to install an extension like rust-src, that has no fixed architecture (arch *),
  #                       you will need to specify this extension in the extensions options or it will not be installed!
  fromManifestFile = manifest:
    { stdenv, fetchurl, patchelf }:
    let
      inherit (builtins) elemAt;
      inherit (super) makeOverridable;
      inherit (super.lib) flip mapAttrs;
      pkgs = fromTOML (builtins.readFile manifest);
    in flip mapAttrs pkgs.pkg (name: pkg:
      makeOverridable ({ extensions, targets, targetExtensions }:
        let
          version' = builtins.match "([^ ]*) [(]([^ ]*) ([^ ]*)[)]" pkg.version;
          version =
            "${elemAt version' 0}-${elemAt version' 2}-${elemAt version' 1}";
          namesAndSrcs =
            getComponents pkgs.pkg name targets extensions targetExtensions
            stdenv fetchurl;
          components = installComponents stdenv namesAndSrcs;
          componentsOuts = builtins.map (comp:
            (super.lib.strings.escapeNixString
              (super.lib.getOutput "out" comp))) components;
        in super.pkgs.symlinkJoin {
          name = name + "-" + version;
          paths = components;
          postBuild = ''
            # If rustc or rustdoc is in the derivation, we need to copy their
            # executable into the final derivation. This is required
            # for making them find the correct SYSROOT.
            for target in $out/bin/{rustc,rustdoc}; do
              if [ -e $target ]; then
                cp --remove-destination "$(realpath -e $target)" $target
              fi
            done
          '';
          # Add the compiler as part of the propagated build inputs in order
          # to run:
          #
          #    $ nix-shell -p rustChannels.stable.rust
          #
          # And get a fully working Rust compiler, with the stdenv linker.
          propagatedBuildInputs = [ stdenv.cc ];
          meta.platforms = stdenv.lib.platforms.all;
        }) {
          extensions = [ ];
          targets = [ ];
          targetExtensions = [ ];
        });
  fromManifest = sha256: manifest:
    { stdenv, fetchurl, patchelf }:
    let
      manifestFile = if sha256 == null then
        builtins.fetchurl manifest
      else
        fetchurl {
          url = manifest;
          inherit sha256;
        };
    in fromManifestFile manifestFile { inherit stdenv fetchurl patchelf; };
in rec {
  lib = super.lib // {
    inherit fromTOML;
    rustLib = { inherit fromManifest fromManifestFile manifest_v2_url; };
  };
  rustChannelOf = { sha256 ? null, ... }@manifest_args:
    fromManifest sha256 (manifest_v2_url manifest_args) {
      inherit (self) stdenv fetchurl patchelf;
    };
  # Set of packages which are automagically updated. Do not rely on these for
  # reproducible builds.
  latest = (super.latest or { }) // {
    rustChannels = {
      nightly = rustChannelOf { channel = "nightly"; };
      beta = rustChannelOf { channel = "beta"; };
      stable = rustChannelOf { channel = "stable"; };
    };
  };
  # Helper builder
  rustChannelOfTargets = channel: date: targets:
    (rustChannelOf { inherit channel date; }).rust.override {
      inherit targets;
    };
  # For backward compatibility
  rustChannels = latest.rustChannels;
  # For each channel:
  #   latest.rustChannels.nightly.cargo
  #   latest.rustChannels.nightly.rust   # Aggregate all others. (recommended)
  #   latest.rustChannels.nightly.rustc
  #   latest.rustChannels.nightly.rust-analysis
  #   latest.rustChannels.nightly.rust-docs
  #   latest.rustChannels.nightly.rust-src
  #   latest.rustChannels.nightly.rust-std
  # For a specific date:
  #   (rustChannelOf { date = "2017-06-06"; channel = "beta"; }).rust
}

self: super: {
  neovim = self.nixpkgs-master.neovim;
  neovim-unwrapped = self.nixpkgs-master.neovim-unwrapped;
}

self: super: {
  neovim = self.nixpkgs-master.neovim;
  neovim-unwrapped = self.nixpkgs-master.neovim-unwrapped;
}

final: prev: rec {
  discord-canary-system = prev.callPackage mkDiscord (rec {
    pname = "discord-canary";
    version = "latest";
    binaryName = "DiscordCanary";
    desktopName = "Discord Canary";
    src = final.discord-canary.src;
    isWayland = true;
    enableVulkan = false;
    extraOptions = [
      "--enable-vulkan"
      "--ignore-gpu-blocklist"
      "--enable-gpu-rasterization"
      "--enable-zero-copy"
      "--disable-gpu-driver-bug-workarounds"
    ];
  });
  mkDiscord =
    { pname
    , version
    , src
    , binaryName
    , desktopName
    , isWayland ? false
    , enableVulkan ? false
    , extraOptions ? [ ]
    , autoPatchelfHook
    , makeDesktopItem
    , lib
    , stdenv
    , wrapGAppsHook
    , alsaLib
    , at-spi2-atk
    , at-spi2-core
    , atk
    , cairo
    , cups
    , dbus
    , electron
    , expat
    , fontconfig
    , freetype
    , gdk-pixbuf
    , glib
    , gtk3
    , libcxx
    , libdrm
    , libnotify
    , libpulseaudio
    , libuuid
    , libX11
    , libXScrnSaver
    , libXcomposite
    , libXcursor
    , libXdamage
    , libXext
    , libXfixes
    , libXi
    , libXrandr
    , libXrender
    , libXtst
    , libxcb
    , mesa
    , nspr
    , nss
    , pango
    , systemd
    , libappindicator-gtk3
    , libdbusmenu
    , nodePackages
    , vulkan-loader
    , vulkan-extension-layer
    , libGL
    }:
    stdenv.mkDerivation rec {
      inherit pname version src;
      nativeBuildInputs = [
        nodePackages.asar
        alsaLib
        autoPatchelfHook
        cups
        libdrm
        libuuid
        libXdamage
        libX11
        libXScrnSaver
        libXtst
        libxcb
        mesa.drivers
        nss
        wrapGAppsHook
      ];
      dontWrapGApps = true;
      libPath = lib.makeLibraryPath [
        libcxx
        systemd
        libpulseaudio
        stdenv.cc.cc
        alsaLib
        atk
        at-spi2-atk
        at-spi2-core
        cairo
        cups
        dbus
        expat
        fontconfig
        freetype
        gdk-pixbuf
        glib
        gtk3
        libnotify
        libX11
        libXcomposite
        libuuid
        libXcursor
        libXdamage
        libXext
        libXfixes
        libXi
        libXrandr
        libXrender
        libXtst
        nspr
        nss
        libxcb
        pango
        systemd
        libXScrnSaver
        libappindicator-gtk3
        libdbusmenu
        vulkan-loader
        vulkan-extension-layer
        libGL
      ];
      flags = (lib.optionals isWayland [
        "--flag-switches-begin"
        "--enable-features=UseOzonePlatform,WebRTCPipeWireCapturer${lib.optionalString enableVulkan ",Vulkan"}"
        "--flag-switches-end"
        "--ozone-platform=wayland"
        "--enable-webrtc-pipewire-capturer"
      ]) ++ extraOptions;
      installPhase = ''
        mkdir -p $out/{bin,usr/lib/${pname},share/pixmaps}
        ln -s discord.png $out/share/pixmaps/${pname}.png
        ln -s "${desktopItem}/share/applications" $out/share/
        # HACKS FOR SYSTEM ELECTRON
        asar e resources/app.asar resources/app
        rm resources/app.asar
        sed -i "s|process.resourcesPath|'$out/usr/lib/${pname}'|" resources/app/app_bootstrap/buildInfo.js
        sed -i "s|exeDir,|'$out/share/pixmaps',|" resources/app/app_bootstrap/autoStart/linux.js
        asar p resources/app resources/app.asar --unpack-dir '**'
        rm -rf resources/app
        # Copy Relevanat data
        cp -r resources/*  $out/usr/lib/${pname}/
        # Create starter script for discord
        echo "#!${stdenv.shell}" > $out/bin/${pname}
        echo "exec ${electron}/bin/electron ${lib.concatStringsSep " " flags} $out/usr/lib/${pname}/app.asar \$@" >> $out/bin/${pname}
        chmod 755 $out/bin/${pname}
        wrapProgram $out/bin/${pname} \
            "''${gappsWrapperArgs[@]}" \
            --prefix XDG_DATA_DIRS : "${gtk3}/share/gsettings-schemas/${gtk3.name}/" \
            --prefix LD_LIBRARY_PATH : ${libPath}
      '';
      desktopItem = makeDesktopItem {
        name = pname;
        exec = pname;
        icon = pname;
        inherit desktopName;
        genericName = meta.description;
        categories = "Network;InstantMessaging;";
        mimeType = "x-scheme-handler/discord";
      };
      meta = with lib; {
        description = "All-in-one cross-platform voice and text chat for gamers";
        homepage = "https://discordapp.com/";
        downloadPage = "https://discordapp.com/download";
        platforms = [ "x86_64-linux" ];
      };
    };
}

final: prev: rec {
  discord-canary-system = prev.callPackage mkDiscord (rec {
    pname = "discord-canary";
    version = "latest";
    binaryName = "DiscordCanary";
    desktopName = "Discord Canary";
    src = final.discord-canary.src;
    isWayland = true;
    enableVulkan = false;
    extraOptions = [
      "--enable-vulkan"
      "--ignore-gpu-blocklist"
      "--enable-gpu-rasterization"
      "--enable-zero-copy"
      "--disable-gpu-driver-bug-workarounds"
    ];
  });
  mkDiscord =
    { pname
    , version
    , src
    , binaryName
    , desktopName
    , isWayland ? false
    , enableVulkan ? false
    , extraOptions ? [ ]
    , autoPatchelfHook
    , makeDesktopItem
    , lib
    , stdenv
    , wrapGAppsHook
    , alsaLib
    , at-spi2-atk
    , at-spi2-core
    , atk
    , cairo
    , cups
    , dbus
    , electron
    , expat
    , fontconfig
    , freetype
    , gdk-pixbuf
    , glib
    , gtk3
    , libcxx
    , libdrm
    , libnotify
    , libpulseaudio
    , libuuid
    , libX11
    , libXScrnSaver
    , libXcomposite
    , libXcursor
    , libXdamage
    , libXext
    , libXfixes
    , libXi
    , libXrandr
    , libXrender
    , libXtst
    , libxcb
    , mesa
    , nspr
    , nss
    , pango
    , systemd
    , libappindicator-gtk3
    , libdbusmenu
    , nodePackages
    , vulkan-loader
    , vulkan-extension-layer
    , libGL
    }:
    stdenv.mkDerivation rec {
      inherit pname version src;
      nativeBuildInputs = [
        nodePackages.asar
        alsaLib
        autoPatchelfHook
        cups
        libdrm
        libuuid
        libXdamage
        libX11
        libXScrnSaver
        libXtst
        libxcb
        mesa.drivers
        nss
        wrapGAppsHook
      ];
      dontWrapGApps = true;
      libPath = lib.makeLibraryPath [
        libcxx
        systemd
        libpulseaudio
        stdenv.cc.cc
        alsaLib
        atk
        at-spi2-atk
        at-spi2-core
        cairo
        cups
        dbus
        expat
        fontconfig
        freetype
        gdk-pixbuf
        glib
        gtk3
        libnotify
        libX11
        libXcomposite
        libuuid
        libXcursor
        libXdamage
        libXext
        libXfixes
        libXi
        libXrandr
        libXrender
        libXtst
        nspr
        nss
        libxcb
        pango
        systemd
        libXScrnSaver
        libappindicator-gtk3
        libdbusmenu
        vulkan-loader
        vulkan-extension-layer
        libGL
      ];
      flags = (lib.optionals isWayland [
        "--flag-switches-begin"
        "--enable-features=UseOzonePlatform,WebRTCPipeWireCapturer${lib.optionalString enableVulkan ",Vulkan"}"
        "--flag-switches-end"
        "--ozone-platform=wayland"
        "--enable-webrtc-pipewire-capturer"
      ]) ++ extraOptions;
      installPhase = ''
        mkdir -p $out/{bin,usr/lib/${pname},share/pixmaps}
        ln -s discord.png $out/share/pixmaps/${pname}.png
        ln -s "${desktopItem}/share/applications" $out/share/
        # HACKS FOR SYSTEM ELECTRON
        asar e resources/app.asar resources/app
        rm resources/app.asar
        sed -i "s|process.resourcesPath|'$out/usr/lib/${pname}'|" resources/app/app_bootstrap/buildInfo.js
        sed -i "s|exeDir,|'$out/share/pixmaps',|" resources/app/app_bootstrap/autoStart/linux.js
        asar p resources/app resources/app.asar --unpack-dir '**'
        rm -rf resources/app
        # Copy Relevanat data
        cp -r resources/*  $out/usr/lib/${pname}/
        # Create starter script for discord
        echo "#!${stdenv.shell}" > $out/bin/${pname}
        echo "exec ${electron}/bin/electron ${lib.concatStringsSep " " flags} $out/usr/lib/${pname}/app.asar \$@" >> $out/bin/${pname}
        chmod 755 $out/bin/${pname}
        wrapProgram $out/bin/${pname} \
            "''${gappsWrapperArgs[@]}" \
            --prefix XDG_DATA_DIRS : "${gtk3}/share/gsettings-schemas/${gtk3.name}/" \
            --prefix LD_LIBRARY_PATH : ${libPath}
      '';
      desktopItem = makeDesktopItem {
        name = pname;
        exec = pname;
        icon = pname;
        inherit desktopName;
        genericName = meta.description;
        categories = "Network;InstantMessaging;";
        mimeType = "x-scheme-handler/discord";
      };
      meta = with lib; {
        description = "All-in-one cross-platform voice and text chat for gamers";
        homepage = "https://discordapp.com/";
        downloadPage = "https://discordapp.com/download";
        platforms = [ "x86_64-linux" ];
      };
    };
}

[
  (import ./neovimOverlay.nix)
  (import ./discordOverlay.nix)
  (import ./broken_rockspec.nix)
]

[
  (import ./neovimOverlay.nix)
  (import ./discordOverlay.nix)
  (import ./broken_rockspec.nix)
]

self: super: {
  lua51Packages = super.lua51Packages.extend (_: lsuper: {
    plenary-nvim = lsuper.plenary-nvim.overrideAttrs (_: {
      knownRockspec = (self.fetchurl {
        url = "https://raw.githubusercontent.com/nvim-lua/plenary.nvim/master/plenary.nvim-scm-1.rockspec";
        sha256 = "08kv1s66zhl9amzy9gx3101854ig992kl1gzzr51sx3szr43bx3x";
      });
    });
  });
}

self: super: {
  lua51Packages = super.lua51Packages.extend (_: lsuper: {
    plenary-nvim = lsuper.plenary-nvim.overrideAttrs (_: {
      knownRockspec = (self.fetchurl {
        url = "https://raw.githubusercontent.com/nvim-lua/plenary.nvim/master/plenary.nvim-scm-1.rockspec";
        sha256 = "08kv1s66zhl9amzy9gx3101854ig992kl1gzzr51sx3szr43bx3x";
      });
    });
  });
}

{ config, lib, pkgs, ... }:
with lib;
let
  # unstable = import <unstable> { configuration = { allowUnfree = true; }; };
  user_configuration = import ./configuration.nix;
  custom_packages = [
    (pkgs.callPackage ./custom_pkgs/base16-shell.nix {})
  ];
in {
  imports = [
    ./applications/git.nix
    ./applications/ion.nix
    ./applications/starship.nix
    ./applications/neovim.nix
    ./applications/tmux.nix
    ./applications/kakoune.nix
  ] ++ (if user_configuration.gui_support then
    [ ./gui_supported.nix ]
  else
    [ ]);
  options = {
    dots = mkOption { type = types.path; };
    modifier = mkOption { type = types.str; };
    scripts = mkOption { type = types.path; };
    gui_support = mkOption { type = types.boolean; };
  };
  config = {
    inherit (user_configuration) dots modifier scripts gui_support;
    home.packages = with pkgs;
      [
        discord
        #this is making me want to cry, I can't make an overlay with a new version
        #without a stack overflow for some reason.
        ion
        exa
        git
        ripgrep
        bat
        bottom # top sucks.
        #development stuff
        mutt
        lynx
        nixfmt
        nodejs
        deno
        python39
        texlive.combined.scheme-full
        gdb
        notify-desktop
        nodePackages.pyright
        dbeaver
        starship
      ] ++ custom_packages;
    # This value determines the Home Manager release that your
    # configuration is compatible with. This helps avoid breakage
    # when a new Home Manager release introduces backwards
    # incompatible changes.
    #
    # You can update Home Manager without changing this value. See
    # the Home Manager release notes for a list of state version
    # changes in each release.
    home.stateVersion = "20.09";
  };
}

{ config, lib, pkgs, ... }:
with lib;
let
  # unstable = import <unstable> { configuration = { allowUnfree = true; }; };
  user_configuration = import ./configuration.nix;
  custom_packages = [
    (pkgs.callPackage ./custom_pkgs/base16-shell.nix {})
  ];
in {
  imports = [
    ./applications/git.nix
    ./applications/ion.nix
    ./applications/starship.nix
    ./applications/neovim.nix
    ./applications/tmux.nix
    ./applications/kakoune.nix
  ] ++ (if user_configuration.gui_support then
    [ ./gui_supported.nix ]
  else
    [ ]);
  options = {
    dots = mkOption { type = types.path; };
    modifier = mkOption { type = types.str; };
    scripts = mkOption { type = types.path; };
    gui_support = mkOption { type = types.boolean; };
  };
  config = {
    inherit (user_configuration) dots modifier scripts gui_support;
    home.packages = with pkgs;
      [
        discord
        #this is making me want to cry, I can't make an overlay with a new version
        #without a stack overflow for some reason.
        ion
        exa
        git
        ripgrep
        bat
        bottom # top sucks.
        #development stuff
        mutt
        lynx
        nixfmt
        nodejs
        deno
        python39
        texlive.combined.scheme-full
        gdb
        notify-desktop
        nodePackages.pyright
        dbeaver
        starship
      ] ++ custom_packages;
    # This value determines the Home Manager release that your
    # configuration is compatible with. This helps avoid breakage
    # when a new Home Manager release introduces backwards
    # incompatible changes.
    #
    # You can update Home Manager without changing this value. See
    # the Home Manager release notes for a list of state version
    # changes in each release.
    home.stateVersion = "20.09";
  };
}

{ config, lib, pkgs, ... }:
{
  imports = [
    ./applications/waybar.nix
    ./applications/vscode.nix
    ./applications/sway.nix
    ./applications/mako.nix
    ./applications/alacritty.nix
  ];
  #enable these
  programs.firefox.enable = true;
  home.packages = with pkgs; [
    #Sway.
    waybar
    dolphin
    breeze-icons
    mako # notification daemon.
    grim
    slurp
    wl-clipboard
    #Gnome
    gnome3.gnome-tweaks
    #CLI stuff.
    alacritty
    konsole
    #pdf viewer
    zathura
    #chat clients
    discord-canary-system
    element-desktop
    #osu - need I say more?
    osu-lazer
    #general
    xournalpp
    calibre
    #Audio
    nixpkgs-master.easyeffects
    #until I setup something with pactl.
    pavucontrol
    spotify
    #stuff.
    obs-studio
    #fonts
    font-awesome
    fira-code
    (nerdfonts.override { fonts = [ "FiraCode" ]; })
    font-awesome_5
    #Video editing
    kdenlive
    #Video Viewer
    vlc
    #art
    krita
  ];
  fonts.fontconfig = { enable = true; };
}

{ config, lib, pkgs, ... }:
{
  imports = [
    ./applications/waybar.nix
    ./applications/vscode.nix
    ./applications/sway.nix
    ./applications/mako.nix
    ./applications/alacritty.nix
  ];
  #enable these
  programs.firefox.enable = true;
  home.packages = with pkgs; [
    #Sway.
    waybar
    dolphin
    breeze-icons
    mako # notification daemon.
    grim
    slurp
    wl-clipboard
    #Gnome
    gnome3.gnome-tweaks
    #CLI stuff.
    alacritty
    konsole
    #pdf viewer
    zathura
    #chat clients
    discord-canary-system
    element-desktop
    #osu - need I say more?
    osu-lazer
    #general
    xournalpp
    calibre
    #Audio
    nixpkgs-master.easyeffects
    #until I setup something with pactl.
    pavucontrol
    spotify
    #stuff.
    obs-studio
    #fonts
    font-awesome
    fira-code
    (nerdfonts.override { fonts = [ "FiraCode" ]; })
    font-awesome_5
    #Video editing
    kdenlive
    #Video Viewer
    vlc
    #art
    krita
  ];
  fonts.fontconfig = { enable = true; };
}