nix-config/hosts/workstations/default.nix

{ outputs, lib, pkgs, ... }:
{
  system.stateVersion = "24.05";

  nix = {
    settings = {
      trusted-users = [ "@wheel" "root" ];
      experimental-features = lib.mkDefault [
        "nix-command"
        "flakes"
        "pipe-operators"
      ];
      auto-optimise-store = true;
    };

    gc = {
      automatic = true;
      dates = "weekly";
      options = "--delete-older-than 14d";
    };
  };

  nixpkgs = {
    overlays = [ outputs.overlays.unstable-packages ];
    config = {
      allowUnfree = true;
      allowUnfreePredicate = (_: true);
    };
  };

  security = {
    sudo.enable = lib.mkDefault false;
    doas = {
      enable = lib.mkDefault true;
      extraRules = [{
        groups = [ "wheel" ];
        keepEnv = true;
        persist = true;
      }];
    };

    polkit.enable = true;
  };

  networking = {
    firewall.enable = true;
    networkmanager.enable = true;
  };

  time.timeZone = "America/Detroit";

  hardware.graphics.enable32Bit = true;

  programs = {
    git.enable = true;
    htop.enable = true;
    neovim = {
      enable = true;
      package = pkgs.unstable.neovim-unwrapped;
      viAlias = true;
      vimAlias = true;
      defaultEditor = true;
    };
  };

  environment.systemPackages = with pkgs; [
    xorg.libX11
    xorg.xset
  ];

  fonts.packages = with pkgs; [
    dejavu_fonts
    dina-font
    iosevka-comfy.comfy-motion-fixed
    liberation_ttf
    noto-fonts
    noto-fonts-emoji
    ubuntu_font_family
    (nerdfonts.override { fonts = [ "JetBrainsMono" ]; })
  ];
}