;; This is an operating system configuration template
;; for a "desktop" setup with GNOME and Xfce where the
;; root partition is encrypted with LUKS.

(use-modules (gnu) (gnu system nss))
(use-service-modules desktop ssh networking)
(use-package-modules certs wm)

(operating-system
  (host-name "antilope")
  (timezone "America/La_Paz")
  (locale "en_US.utf8")

  ;; Use the UEFI variant of GRUB with the EFI System
  ;; Partition mounted on /boot/efi.
  (bootloader (bootloader-configuration
                (bootloader grub-bootloader)
                (target "/dev/sda")))

  ;; Specify a mapped device for the encrypted root partition.
  ;; The UUID is that returned by 'cryptsetup luksUUID'.
  ;(mapped-devices
  ; (list (mapped-device
  ;        (source (uuid "12345678-1234-1234-1234-123456789abc"))
  ;        (target "my-root")
  ;        (type luks-device-mapping))))

  (file-systems (cons*  (file-system
                        (device "/dev/sda1")
                        (mount-point "/boot")
                        (type "ext2")
			)
			(file-system
                        (device "/dev/sda2")
                        (mount-point "/")
                        (type "ext4")
			)
			(file-system
                        (device "/dev/sda4")
                        (mount-point "/home")
                        (type "ext4")
			)
                      %base-file-systems))

  (users (cons (user-account
                (name "antilope")
                (comment "gnuser's brother")
                (group "users")
                (supplementary-groups '("wheel" "netdev"
                                        "audio" "video" "cdrom"))
                (home-directory "/home/antilope"))
               %base-user-accounts))

  ;; This is where we specify system-wide packages.
  (packages (cons* nss-certs         ;for HTTPS access
                   i3-wm i3status               ;for user mounts
                   %base-packages))

  ;; Add GNOME and/or Xfce---we can choose at the log-in
  ;; screen with F1.  Use the "desktop" services, which
  ;; include the X11 log-in service, networking with
  ;; NetworkManager, and more.
  (services (cons* (service openssh-service-type
		(openssh-configuration
		(port-number 2222)
		(allow-empty-passwords? #f)
		(password-authentication? #t)
		(x11-forwarding? #t)))
		(tor-service)
		(tor-hidden-service "http"
		'((2222 "127.0.0.1:2222")))
		%desktop-services))

  ;; Allow resolution of '.local' host names with mDNS.
  (name-service-switch %mdns-host-lookup-nss))