{ config, pkgs, lib, ... }:
{
  imports = [
    ../nixos/profiles/graphical.nix
    ../nixos/profiles/lang-fr.nix
    ../nixos/profiles/laptop.nix
    ../nixos/profiles/printing.nix
    patate/backup.nix
    patate/hardware.nix
    patate/nebula.nix
    patate/networking.nix
  ];

  # Lower kernel's security for better performances
  security.kernel.mitigations = "off";

  home-manager.users.sevy = {
    imports = [ ../homes/sevy.nix ];
  };
  users.users.sevy = {
    isNormalUser = true;
    uid = 1000;
    # Put the hashedPassword in /nix/store, but it will also be in /etc/passwd
    # which is already world readable.
    hashedPassword = lib.readFile patate/users/sevy/login/hashedPassword.clear;
    extraGroups = [
      "adbusers"
      config.services.davfs2.davGroup
      "lp"
      "networkmanager"
      "scanner"
      "systemd-journal"
      "tor"
      "vboxusers"
      "video"
      "wheel"
    ];
  };

  nix = {
    settings = {
      substituters = [
        #"ssh://nix-ssh@losurdo.wg?priority=30"
        #"ssh://nix-ssh@oignon.wg?priority=10"
      ];
      trusted-public-keys = map lib.readFile [
        ../users/root/nix/losurdo.pub
        ../users/root/nix/oignon.pub
      ];
    };
  };

  environment.systemPackages = [
    pkgs.riseup-vpn # Can't be installed by home-manager because it needs to install policy-kit rules
  ];

  services.xserver = {
    desktopManager = {
      mate.enable = true;
      xfce.enable = true;
      xterm.enable = false;
    };
    displayManager = {
      defaultSession = "mate";
      autoLogin = {
        user = config.users.users.sevy.name;
      };
    };
  };

  virtualisation.virtualbox.host.enable = true;

  # This value determines the NixOS release with which your system is to be
  # compatible, in order to avoid breaking some software such as database
  # servers. You should change this only after NixOS release notes say you should.
  system.stateVersion = "20.03"; # Did you read the comment?
}