#
#  Lifebook laptop — system configuration
#

{ lib, pkgs, ... }:

{
  imports = [
    ./hardware-configuration.nix
    ../../modules/desktop
  ];

  # ── Desktop module options ──────────────────────────────────────────────
  myDesktop.windowManager       = "niri";
  myDesktop.cpu                 = "intel";
  myDesktop.virtualisation.enable = true;

  myDesktop.laptop.enable           = true;
  myDesktop.laptop.lidSwitch        = "suspend-then-hibernate";
  myDesktop.laptop.hibernateDelaySec = "1h";

  myDesktop.nitrokey.enable = true;

  myDesktop.syncthing.enable  = true;
  myDesktop.syncthing.devices = {
    "jupiter.home.opel-online.de" = { id = "T53WU6Z-3NT74ZE-PZVZB2N-7FBTZ5K-HESC2ZM-W4ABDAS-NWXHTGI-ST4CDQR"; };
    "hades.home.opel-online.de"   = { id = "3VPCBVW-RH7XKFM-TWJGQHC-ZRAQ575-CQKGGKP-NAB4VXE-KCKJFUT-AMCUQQA"; };
  };
  myDesktop.syncthing.folders = {
    "Sync" = {
      path        = "/home/kabbone/Sync";
      devices     = [ "jupiter.home.opel-online.de" "hades.home.opel-online.de" ];
      ignorePerms = false;
    };
  };

  myDesktop.extraSystemPackages = with pkgs; [
    intel-media-driver
    intel-compute-runtime
  ];

  # ── Host-specific settings ──────────────────────────────────────────────
  boot = {
    kernelPackages    = pkgs.linuxPackages_latest;
    initrd.prepend    = [ "${./patched-SSDT4}" ];
    loader = {
      systemd-boot.enable  = lib.mkForce false;
      efi.canTouchEfiVariables = true;
      efi.efiSysMountPoint = "/boot";
      timeout              = 1;
    };
    lanzaboote = {
      enable    = true;
      pkiBundle = "/etc/secureboot";
    };
  };
}