nixos-configs/home-manager/default.nix

{ pkgs, lib, config, ... }: {
  imports = [
    ./bash
    ./neovim
    ./firefox
    ./ssh
    ./syncthing
    ./keepassxc
    ./git
    ./direnv
    ./thunderbird
    ./fzf
    ./bat
  ];

  home = {
    username = "pim";
    homeDirectory = "/home/pim";
    stateVersion = "23.05";

    packages = with pkgs; [
      unstable.moonlight-qt
      unstable.vlc
      unstable.nicotine-plus
      unstable.logseq
      unstable.signal-desktop
      unstable.telegram-desktop
      unstable.strawberry
      unstable.gimp
      unstable.libreoffice
      virt-manager
      gnome.gnome-tweaks
      unstable.impression
      poppler_utils # For pdfunite
      silicon
      unstable.dbeaver-bin
      unstable.wireshark
      units
      btrfs-progs
      exfat
      unstable.qFlipper
      f3
      unstable.insomnia
      unstable.vorta
      jellyfin-media-player
      jq
      kubectl
      file
      yq
      age
      sops
      nmap
      unstable.devenv
      unstable.attic-client
      unstable.hexchat
      sbctl
      borgbackup
      unstable.krita
      unstable.bottles-unwrapped
    ];
  };

  programs = {
    home-manager.enable = true;
    chromium.enable = true;
    alacritty.enable = true;

    # Currently, it is not possible to have Home Manager manage Liberwolf extensions.
    # There is a draft PR which addresses this:
    # https://github.com/nix-community/home-manager/pull/3339
    # The extensions I currently use are:
    # - ublock-origin (already installed by librewolf)
    # - cookie-autodelete
    # - clearurls
    # - istilldontcareaboutcookies
    # - keepassxc-browser
    # - redirector
    # - violentmonkey
    # - boring-rss
    # - kagi-search
    # - refined-github
    librewolf = {
      enable = true;
      settings = {
        "identity.fxaccounts.enabled" = true;
        "privacy.clearOnShutdown.history" = false;
        "privacy.clearOnShutdown.downloads" = false;
        "browser.translations.automaticallyPopup" = false;
        "browser.aboutConfig.showWarning" = false;
        "privacy.clearOnShutdown.cookies" = false;
      };
    };
  };

  # Let home-manager manage the X session
  xsession = { enable = true; };

  xdg = {
    userDirs.enable = true;
    configFile."home/postgresql_server.crt".source = ./postgresql_server.crt;
    configFile."home/postgresql_client.crt".source = ./postgresql_client.crt;
  };

  homeage = {
    identityPaths = [ "/home/pim/.ssh/age_ed25519" ];
    installationType = "systemd";

    file."common-pg-tfbackend" = {
      source = ../secrets/common-pg-tfbackend.age;
      symlinks = [ "${config.xdg.configHome}/home/common.pg.tfbackend" ];
    };

    file."ansible-vault-secret" = {
      source = ../secrets/ansible-vault-secret.age;
      symlinks = [ "${config.xdg.configHome}/home/ansible-vault-secret" ];
    };

    file."powerdns-api-key" = {
      source = ../secrets/powerdns-api-key.json.age;
      symlinks = [ "${config.xdg.configHome}/home/powerdns-api-key.json" ];
    };

    file."postgresql_client.key" = {
      source = ../secrets/postgresql_client.key.age;
      symlinks = [ "${config.xdg.configHome}/home/postgresql_client.key" ];
    };
  };

  fonts.fontconfig.enable = true;

  dconf.settings = with lib.hm.gvariant; {
    "org/gnome/desktop/sound".allow-volume-above-100-percent = true;
    "org.gnome.desktop.wm.preferences".auto-raise = true;

    "org/gnome/shell".enabled-extensions = [
      "workspace-indicator@gnome-shell-extensions.gcampax.github.com"
      "pop-shell@system76.com"
    ];

    "org/gnome/desktop/input-sources" = {
      sources = [ (mkTuple [ "xkb" "us" ]) ];
      xkb-options = [ "terminate:ctrl_alt_bksp" "caps:escape" ];
    };

    "org/gnome/shell/extensions/pop-shell" = {
      active-hint = true;
      fullscreen-launcher = false;
      mouse-cursor-focus-location = mkUint32 4;
      mouse-cursor-follows-active-window = true;
      show-skip-taskbar = false;
      show-title = true;
      smart-gaps = false;
      snap-to-grid = false;
      stacking-with-mouse = true;
      tile-by-default = true;
    };

    "org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom0" = {
      binding = "<Super>t";
      command = lib.getExe config.programs.alacritty.package;
      name = "Terminal";
    };

    "org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom1" = {
      binding = "<Super>e";
      command = "${lib.getExe config.programs.librewolf.package} --browser";
      name = "Browser";
    };

    "org/gnome/desktop/wm/keybindings" = {
      close = [ "<Shift><Super>q" ];
      minimize = mkEmptyArray type.string;
      move-to-workspace-1 = [ "<Shift> <Super> 1" ];
      move-to-workspace-2 = [ "<Shift><Super>2" ];
      move-to-workspace-3 = [ "<Shift><Super>3" ];
      move-to-workspace-4 = [ "<Shift><Super>4" ];
      switch-applications = mkEmptyArray type.string;
      switch-applications-backward = mkEmptyArray type.string;
      switch-to-workspace-1 = [ "<Super>1" ];
      switch-to-workspace-2 = [ "<Super>2" ];
      switch-to-workspace-3 = [ "<Super>3" ];
      switch-to-workspace-4 = [ "<Super>4" ];
      toggle-fullscreen = [ "<Super>f" ];
    };
  };
}