System/machines/productivity-vm/configuration.nix

{ config, lib, pkgs, inputs, ... }:

{
  # Sops setup for this machine
  sops.secrets = {
    # "borg-ssh-key" = {
    #   sopsFile = ../../secrets/productivity-vm/borg.yaml;
    #   format = "yaml";
    # };
    # "borg-password" = {
    #   sopsFile = ../../secrets/productivity-vm/borg.yaml;
    #   format = "yaml";
    # };
    # "windows-bitlocker-key" = {
    #   sopsFile = ../../secrets/productivity-vm/windows.yaml;
    #   format = "yaml";
    # };
    # "last.fm" = {
    #   sopsFile = ../../secrets/productivity-vm/last.fm;
    #   format = "binary";
    #   owner = "nathan";
    #   mode = "0400";
    # };
  };
  # Make the vm boot
  boot.loader.grub = {
    enable = true;
    device = "/dev/vda";
    useOSProber = true;
  };
  # Setup system configuration
  nathan = {
    programs = { games = false; };
    services = {
      borg = { enable = false; };
      kubo = { enable = false; };
    };
    config = {
      isDesktop = true;
      setupGrub = false;
      nix.autoUpdate = false;
      harden = false;
      hyprland.enableGreetd = false;
    };
  };
  # Configure networking
  networking = {
    domain = "mccarty.io";
    useDHCP = false;
    interfaces.ens33.useDHCP = true;
    nat.externalInterface = "ens33";
  };

  # Setup home manager
  home-manager.users.nathan = import ./home.nix;

  # Configure nix build
  nix.settings = {
    cores = 8;
    max-jobs = 4;
  };

  # Make hyprland work
  environment.sessionVariables = {
    "WLR_RENDERER_ALLOW_SOFTWARE" = "1";
    "WLR_NO_HARDWARE_CURSORS" = "1";
    "HYPRLAND_LOG_WLR" = "1";
  };
}