path: root/machines/darwin/aarch64-darwin/mba-m2/default.nix

{
  adminUser,
  pkgs,
  self,
  ...
}:
{

  age = {
    secrets = {
      ssh-remote-builder = {
        file = "${self}/secrets/ssh-remote-builder.age";
      };
    };
  };

  imports = [
    "${self}/profiles/home-manager.nix"
    "${self}/profiles/nix/remote-builder.nix"
    "${self}/profiles/darwin/desktop.nix"
    "${self}/profiles/darwin/keyboard.nix"
    "${self}/profiles/darwin/nix.nix"
    "${self}/profiles/darwin/security.nix"
    "${self}/profiles/desktop/fonts.nix"
  ];

  system.primaryUser = adminUser.name;

  # https://github.com/nix-darwin/nix-darwin/issues/1339
  ids.gids.nixbld = 30000;

  networking.hostName = "mba-m2";

  # The user should already exist, but we need to set this up so Nix knows
  # what our home directory is (https://github.com/LnL7/nix-darwin/issues/423).
  users = {
    users.${adminUser.name} = {
      home = "/Users/${adminUser.name}";
      shell = pkgs.fish;
    };
  };

  environment.shells = [ pkgs.fish ];

  programs.fish.enable = true;
  programs.fish.shellInit = ''
    # Nix
    if test -e '/nix/var/nix/profiles/default/etc/profile.d/nix-daemon.fish'
      source '/nix/var/nix/profiles/default/etc/profile.d/nix-daemon.fish'
    end
    # End Nix
  '';

  programs.ssh.knownHosts = {
    "github.com".publicKey =
      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMqqnkVzrm0SdG6UOoqKLsabgH5C9okWi0dh2l9GKJl";
  };

  home-manager.users.${adminUser.name} = {
    home.stateVersion = "23.05";
    home.username = "${adminUser.name}";
    home.homeDirectory = "/Users/${adminUser.name}";
    home.packages = with pkgs; [
      element-desktop
      zoom-us
    ];
    imports = [
      "${self}/home/profiles/mac.nix"
      "${self}/home/profiles/media.nix"
    ];
    inherit (adminUser) userinfo;
  };
}