{ config, pkgs, lib, ... }:
{

  #########
  # Kernel
  
  boot.initrd.availableKernelModules = [ "uhci_hcd" "ehci_pci" "ahci" "firewire_ohci" ];
  boot.kernelModules = [ "kvm-intel" ];
  # Use the GRUB 2 boot loader.
  boot.loader.grub.enable = true;
  boot.loader.grub.version = 2;
  # Define on which hard drive you want to install Grub.
  boot.loader.grub.device = "/dev/sda";
  boot.initrd.luks.devices = [ { device = "/dev/sda2"; name = "cryptroot"; } ];


  ###########
  # Hardware
  
  # Use this if you want the T400 wifi to work …
  hardware.enableAllFirmware = true;

  hardware.trackpoint = {
    enable = true;
    emulateWheel = true;
    speed = 250;
    sensitivity = 140;
  };

  fileSystems."/" = {
    device = "/dev/dm-0";
    fsType = "btrfs";
  };

  fileSystems."/boot" = {
    device = "/dev/sda1";
    fsType = "ext3";
  };


  ######
  # Nix
  
  nix.maxJobs = 2;

  networking.hostName = "katara";
  networking.networkmanager.enable = true;

  networking.firewall.enable = true;
  # Programmer’s dilemma
  networking.firewall.allowedTCPPortRanges = [
    { from = 8000; to = 8005; }
    { from = 8080; to = 8085; }
  ];

  i18n = {
    consoleFont = "lat9w-16";
    consoleKeyMap = "us";
    defaultLocale = "en_US.UTF-8";
  };


  ###########
  # Packages

  environment.systemPackages = with pkgs;
  let
    # hopefully temporary, but to make ghc package binaries work:
    haskellngPackages = pkgs.haskell-ng.packages.ghc7101;
    haskellPkgs = with pkgs.haskellngPackages; [
#      ghc
#      cabal-install
#      cabal2nix
    ];
    mailPkgs = [
      offlineimap
      mutt-with-sidebar
      msmtp
    ];
  in [
    ack
    curl
    chromium
    i3lock
    emacs
    nix-repl
    fish
    lilyterm
    mkpasswd
    git
    tmux
    vim
    wget
    xbindkeys
    zsh
  ] ++ haskellPkgs;


  ###########
  # Services

  # Enable the OpenSSH daemon.
  services.openssh.enable = true;

  # Enable CUPS to print documents.
  services.printing.enable = true;

  time.timeZone = "Europe/Berlin";

  # locate
  services.locate = {
    enable = true;
    extraFlags = ["--prunepaths='/nix/store'"];
  };

  
  ###################
  # Graphical System
  
  # Enable the X11 windowing system.
  services.xserver = {
    enable = true;
    layout = "de";
    xkbVariant = "neo";
    xkbOptions = "altwin:swap_alt_win";
    serverFlagsSection = ''
      Option "StandbyTime" "10"
      Option "SuspendTime" "20"
      Option "OffTime" "30"
      Option "AutoRepeat" "35 250"
    '';
    synaptics.enable = true;
    synaptics.minSpeed = "0.5";
    synaptics.accelFactor = "0.01";
    videoDrivers = [ "intel" "vesa" ];
  };

  services.xserver.windowManager.xmonad.enable = true;
  # services.xserver.windowManager.i3.enable = true;
  # services.xserver.desktopManager.gnome3.enable = true;

  fonts.enableCoreFonts = true;
  fonts.fontconfig.defaultFonts.monospace = [ "Consolas" "DejaVu Sans Mono" ];
  # use overkill infinality settings from old Arch installation
  fonts.fontconfig.ultimate.rendering = {
    INFINALITY_FT_FILTER_PARAMS = "08 24 36 24 08";
    INFINALITY_FT_FRINGE_FILTER_STRENGTH = "25";
    INFINALITY_FT_USE_VARIOUS_TWEAKS = "true";
    INFINALITY_FT_WINDOWS_STYLE_SHARPENING_STRENGTH = "25";
    INFINALITY_FT_STEM_ALIGNMENT_STRENGTH = "15";
    INFINALITY_FT_STEM_FITTING_STRENGTH = "15";
  };
  fonts.fontconfig.ultimate.substitutions = "combi";

  # redshift
  services.redshift = {
    enable = true;
    latitude = "48";
    longitude = "10";
  };


  ########
  # Users

  # Nobody wants mutable state. :)
  users.mutableUsers = false;
  users.extraUsers = 
    let authKeys = ["ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJhthfk38lzDvoI7lPqRneI0yBpZEhLDGRBpcXzpPSu+V0YlgrDix5fHhBl+EKfw4aeQNvQNuAky3pDtX+BDK1b7idbz9ZMCExy2a1kBKDVJz/onLSQxiiZMuHlAljVj9iU4uoTOxX3vB85Ok9aZtMP1rByRIWR9e81/km4HdfZTCjFVRLWfvo0s29H7l0fnbG9bb2E6kydlvjnXJnZFXX+KUM16X11lK53ilPdPJdm87VtxeSKZ7GOiBz6q7FHzEd2Zc3CnzgupQiXGSblXrlN22IY3IWfm5S/8RTeQbMLVoH0TncgCeenXH7FU/sXD79ypqQV/WaVVDYMOirsnh/ philip@nyx"];
    in {
      philip = rec {
	name = "philip";
	group = "users";
        extraGroups = [ "wheel" "networkmanager" ];
	uid = 1000;
	createHome = true;
	home = "/home/philip";
        passwordFile = "${home}/.config/passwd";
        # password = "test"; # in case of emergency, break glass
	shell = "/run/current-system/sw/bin/bash";
        openssh.authorizedKeys.keys = authKeys;
    };
  };


  ########
  # Fixes
  
  # fix for emacs
  programs.bash.promptInit = "PS1=\"# \"";
}