{ config, lib, pkgs, ... }:

{
  imports = [ ./hardware-configuration.nix ../../configuration-desktop.nix ];

  boot.initrd.supportedFilesystems = [ "zfs" ];
  boot.initrd.systemd.enable = true;
  services.zfs.autoScrub.enable = true;
  services.zfs.trim.enable = true;
  # fstrim is also enabled by nixos-hardware, but only runs for /boot

  services.fprintd.enable = true;
  # fix hang on initial login
  security.pam.services.login.fprintAuth = false;

  networking.hostName = "daisy";
  networking.hostId = "293a1290";

  # Set your time zone.
  time.timeZone = "America/Phoenix";

  # Open ports in the firewall.
  networking.firewall.allowedTCPPorts = [ 22 80 443 1337 8081 ];
  networking.firewall.allowedUDPPorts = [ 1337 ];

  system.stateVersion = "24.11";
  services.immich.enable = true;

  environment.systemPackages = [
    pkgs.idapro9
    pkgs.qemu_kvm
    (pkgs.runCommand "OVMF-fd" {} ''
      mkdir -p $out/share/FV
      ln -s ${pkgs.OVMF.fd}/FV/OVMF_CODE.fd $out/share/FV/OVMF_CODE.fd
    '')
    pkgs.OVMF.fd
  ];

  services.postgresql.enable = true;
  services.postgresql.authentication = ''
    local all all peer map=pgadmin-superuser
  '';
  services.postgresql.identMap = ''
    pgadmin-superuser pgadmin postgres
    pgadmin-superuser postgres postgres
  '';
  services.pgadmin.enable = true;
  services.pgadmin.initialEmail = "audrey@rhelmot.io";
  services.pgadmin.initialPasswordFile = "/var/lib/pgadmin/initial_password_file";
}