# This is the root configuration of the target machine.
# Usable by nixos-install and used by nixops.
# It is NOT copied nor usable on the target machine,
# only the resulting closure is copied to the target machine.
{pkgs, lib, config, options, nodes, resources, ...}:
let
  inherit (builtins.extraBuiltins) pass;
in
{
  # This value determines the NixOS release with which your system is to be
  # compatible, in order to avoid breaking some software such as database
  # servers. You should change this only after NixOS release notes say you should.
  system.stateVersion = "19.09"; # Did you read the comment?

  nixpkgs.overlays = import ../overlays.nix;

  imports =
    [ ../nixos/defaults.nix
      mermet/apu2e4.nix
      mermet/zfs.nix
      mermet/lesptts.nix
      mermet/shorewall.nix
    ];

  networking = {
    hostName = "mermet";
    domain   = "sourcephile.fr";
  };

  users = {
    mutableUsers = false;
    users = {
      root = rec {
        initialPassword = password;
        password        = pass "servers/mermet/login/root";
        openssh.authorizedKeys.keys = [
          (pass "members/julm/ssh.pub")
        ];
      };
    };
    groups = {
    };
  };

  environment = {
    systemPackages = with pkgs; [
      cryptsetup
      fio
      git
      gptfdisk
      lm_sensors
      smartctl-tbw
    ];
  };
}