frank-nix/hosts/shared/nixos-server.nix

{
  config,
  pkgs,
  lib,
  inputs,
  ...
}:
let
  unstable = inputs.nixpkgs-unstable.legacyPackages.${pkgs.stdenv.hostPlatform.system};
in
{
  boot.loader = {
    systemd-boot.enable = true;
    systemd-boot.configurationLimit = 10;
    efi.canTouchEfiVariables = true;
    timeout = 0;
  };

  services = {
    avahi = {
      enable = true;
      nssmdns4 = true;
      openFirewall = true;
    };

    openssh.enable = true;
  };

  networking = {
    useNetworkd = true;

    firewall = {
      trustedInterfaces = [ "br0" ];
      allowedTCPPorts = [ 22 ];
    };
  };

  systemd.network = {
    enable = true;

    netdevs = {
      "30-br0" = {
        netdevConfig = {
          Kind = "bridge";
          Name = "br0";
          MACAddress = "none";
        };
      };
    };

    networks = {
      "30-eno1" = {
        name = "eno1";
        bridge = [ "br0" ];
      };

      "30-br0" = {
        name = "br0";
        DHCP = "yes";
      };
    };

    links = {
      "30-br0" = {
        matchConfig = {
          OriginalName = "br0";
        };

        linkConfig = {
          MACAddressPolicy = "none";
        };
      };
    };
  };

  time.timeZone = "America/New_York";

  i18n = {
    defaultLocale = "en_US.UTF-8";

    extraLocales = [
      "ja_JP.UTF-8/UTF-8"
    ];

    extraLocaleSettings = {
      LC_ADDRESS = "en_US.UTF-8";
      LC_IDENTIFICATION = "en_US.UTF-8";
      LC_MEASUREMENT = "en_US.UTF-8";
      LC_MONETARY = "en_US.UTF-8";
      LC_NAME = "en_US.UTF-8";
      LC_NUMERIC = "en_US.UTF-8";
      LC_PAPER = "en_US.UTF-8";
      LC_TELEPHONE = "en_US.UTF-8";
      LC_TIME = "en_US.UTF-8";
    };
  };

  programs = {
    bash = {
      enable = true;

      interactiveShellInit = ''
        eval "$(jump shell)"
        bind -x '"\eOQ": clear;fastfetch'
      '';
    };

    starship = {
      enable = true;

      settings = {
        character = {
          success_symbol = "[λ](bold green)";
          error_symbol = "[λ](bold red)";
        };
      };
    };

    neovim = {
      enable = true;
      defaultEditor = true;
      vimAlias = true;

      configure = {
        customRC = ''
          set nocompatible
          set backspace=indent,eol,start
          set tabstop=2
          set shiftwidth=2
          set expandtab
        '';

        packages.myPlugins = with pkgs.vimPlugins; {
          start = [
            vim-lastplace
            vim-nix
          ];

          opt = [ ];
        };
      };
    };

    ssh.startAgent = true;
  };

  virtualisation = {
    docker.enable = true;
    spiceUSBRedirection.enable = true;

    libvirtd = {
      enable = true;

      qemu = {
        package = pkgs.qemu_kvm;
        runAsRoot = true;
        swtpm.enable = true;
      };
    };
  };

  users.users.frank = {
    isNormalUser = true;
    description = "Frank LoTurco";

    extraGroups = [
      "wheel"
      "libvirtd"
      "docker"
    ];
  };

  environment = {
    systemPackages = with pkgs; [
      wget
      dnsmasq
      guestfs-tools
      unrar
      nil
      bash-language-server
      devenv
      jump
      weather
      borgbackup
      openjdk
      openjdk17
      openjdk25
      tmux

      unstable.fastfetch

      (python3.withPackages (
        python-pkgs: with python-pkgs; [
          requests
          pandas
        ]
      ))
    ];

    shellAliases = {
      l = "ls -alh";
      ll = "ls -l";
      ls = "ls --color=tty";
      ff = "clear;fastfetch --logo nixos2";
      ffw = "clear;fastfetch --logo nixos2;printf '\n';weather kmco";
      wget = "wget --hsts-file=$XDG_DATA_HOME/wget-hsts";
      nb = "nix-build";
      nix-rebuild = "sudo nixos-rebuild switch";
    };

    sessionVariables = rec {
      XDG_CACHE_HOME = "$HOME/.cache";
      XDG_CONFIG_HOME = "$HOME/.config";
      XDG_DATA_HOME = "$HOME/.local/share";
      XDG_STATE_HOME = "$HOME/.local/state";

      XDG_DATA_DIRS = [
        "${pkgs.gsettings-desktop-schemas}/share/gsettings-schemas/${pkgs.gsettings-desktop-schemas.name}"
        "${pkgs.gtk3}/share/gsettings-schemas/${pkgs.gtk3.name}"
      ];

      AZURE_CONFIG_DIR = "$XDG_DATA_HOME/azure";
      NPM_CONFIG_INIT_MODULE = "$XDG_CONFIG_HOME/npm/config/npm-init.js";
      NPM_CONFIG_CACHE = "$XDG_CACHE_HOME/npm";
      NPM_CONFIG_TMP = "$XDG_RUNTIME_DIR/npm";
      _JAVA_OPTIONS = "-Djava.util.prefs.userRoot=$XDG_CONFIG_HOME/java";
      PYTHON_HISTORY = "$XDG_STATE_HOME/python_history";
      HISTFILE = "$XDG_STATE_HOME/bash/history";
      DOTNET_ROOT = "${pkgs.dotnet-sdk}/share/dotnet";
      DOTNET_CLI_HOME = "$XDG_DATA_HOME/dotnet";
      GTK2_RC_FILES = "$XDG_CONFIG_HOME/gtk-2.0/gtkrc";
    };
  };

  nix = {
    gc = {
      automatic = true;
      dates = "weekly";
      options = "--delete-older-than 30d";
    };

    optimise = {
      automatic = true;
      dates = "weekly";
    };

    settings = {
      experimental-features = [
        "nix-command"
        "flakes"
      ];

      use-xdg-base-directories = true;
    };
  };

  nixpkgs.config.allowUnfree = true;
  system.stateVersion = "26.05";
}