home/nixos/machines/foxhut/machine.nix

{ pkgs, pkgs-unstable, asahi-firmware, ... }:
{ config, ... }:

{
  environment.systemPackages = (with pkgs-unstable; [
    renoise
    signal-desktop
    wireguard-tools
    cifs-utils
  ]) ++ (with pkgs; [
    prismlauncher
  ]);

  services.mysql = {
    enable = true;
    package = pkgs.mariadb;
    dataDir = "/var/lib/mysql";
    settings = {
      mysqld = {
        bind_address = "127.0.0.1";
        # socket = "/tmp/mariadb.sock";
      };
    };
    ensureDatabases = [
      "bnuybase"
    ];
    ensureUsers = [
      {
        name = "xenia";
        ensurePermissions = {
          "bnuybase.*" = "ALL PRIVILEGES";
        };
      }
    ];
  };

  networking.firewall.allowedUDPPorts = [ 51821 ];
  networking.wireguard = {
    enable = true;
    interfaces.wg0 = {
      ips = [ "192.168.69.254/32" ];
      listenPort = 51821;
      privateKeyFile = "/home/xenia/wireguard-keys/private";
      peers = [ {
        publicKey = "XfHU29ij76y4TB8P/QJyn1JnTl9tvxO77IGVmM6p+ic=";
        allowedIPs = [ "10.30.0.0/16" "10.250.0.0/16" "10.254.0.0/16" "192.168.30.0/24" "192.168.40.0/24" "192.168.50.0/24" "192.168.51.0/24" "192.168.250.0/24" ];
        endpoint = "129.16.13.37:13231";
        persistentKeepalive = 25;
      } ];
    };
  };

  services.pipewire.wireplumber.extraConfig."10-bluez" = {
    "monitor.bluez.properties" = {
      "bluez5.enable-sbc-xq" = true;
      "bluez5.enable-msbc" = false;
      "bluez5.enable-hw-volume" = true;
      "bluez5.codecs" = [
        "sbc" "sbc_xq" "aac"
      ];
    };
  };
}