niximg.nix

{ config, lib, pkgs, ... }:
with lib; {

  home-manager.useUserPackages = true;

  isoImage.edition = "gnome";

  # Whitelist wheel users to do anything
  # This is useful for things like pkexec
  #
  # WARNING: this is dangerous for systems
  # outside the installation-cd and shouldn't
  # be used anywhere else.
  security.polkit.extraConfig = ''
    polkit.addRule(function(action, subject) {
      if (subject.isInGroup("wheel")) {
        return polkit.Result.YES;
      }
    });
  '';

  networking.wireless.enable = mkForce false;

  services.xserver.displayManager = {
    gdm = {
      # autoSuspend makes the machine automatically suspend after inactivity.
      # It's possible someone could/try to ssh'd into the machine and obviously
      # have issues because it's inactive.
      # See:
      # * https://github.com/NixOS/nixpkgs/pull/63790
      # * https://gitlab.gnome.org/GNOME/gnome-control-center/issues/22
      autoSuspend = false;
    };
    autoLogin = {
      enable = true;
      user = "nixos";
    };
  };

  x-os = {
    enable = true;
    isoMode = true;
    hostname = "niximg";
    # Use SJTU Mirror together with original cache because SJTU has better performance inside Mainland China.
    # Use Cachix to reduce repeated builds.
    # Set the list to `[ ]` to use official cache only.
    binaryCaches = [
      "https://mirror.sjtu.edu.cn/nix-channels/store"
      "https://cache.nixos.org/"
      "https://dcompass.cachix.org/"
      "https://lexuge.cachix.org/"
      "https://dram.cachix.org"
    ];
    # Choose ibus engines to apply
    ibus-engines = with pkgs.ibus-engines; [ libpinyin ];
    # Add installation script into LiveCD.
    extraPackages = [
      (pkgs.writeShellScriptBin "install-script"
        (builtins.readFile ./install.sh))
    ];
  };

  std.interface = {
    system = { dirs = { secrets.clash = "${./secrets/clash.yaml}"; }; };
  };

  # Networking
  netkit = {
    clash = {
      enable = true;
      redirPort = 7892; # This must be the same with the one in your clash.yaml
      afterUnits = [ "dcompass.service" ];
    };
  };

  # User related section.
  users.users.nixos.shell = pkgs.zsh;
  ash-profile.nixos = {
    extraPackages = with pkgs; [
      htop
      firefox-wayland
      tdesktop
      gparted
      etcher
      # torbrowser
      pavucontrol
    ];
    emacsPackages = with pkgs; [
      (hunspellWithDicts [ hunspellDicts.en-us hunspellDicts.en-us-large ])
      emacs-all-the-icons-fonts
      ash-emacs-x86_64-linux
    ];
  };
}