nix-config/modules/hosts/sirius/config.nix

{config, ...}: {
  flake.modules.nixos.sirius = {
    pkgs,
    hostName,
    userName,
    ...
  }: {
    imports = with config.flake.modules.nixos; [
      boot
      networking
      desktop
      gaming
      virtualisation
    ];

    tnix = {
      boot = {
        secure-boot.enable = true;

        impermanence = {
          enable = true;

          home = {
            directories = [
              "Distrobox"
              ".steam"
              ".bun"
              ".rustup"
              ".cache/awww"
              ".cache/serpantinum"
              ".config/BraveSoftware"
              ".config/zed"
              ".config/Vencord"
              ".config/vesktop"
              ".config/sops"
              ".config/obs-studio"
              ".config/easyeffects"
              ".config/DankMaterialShell"
              ".local/share/Steam"
              ".local/share/lutris"
              ".local/share/net.lutris.Lutris"
              ".local/share/nvim"
              ".local/share/opencode"
              ".local/share/zsh"
              ".local/share/zoxide"
              ".local/share/voxtype"
              ".local/state/lazygit"
              ".local/share/vicinae"
              ".local/share/TelegramDesktop"
              ".local/share/GalaxyBudsClient"
              ".local/state/serpantinum"
              ".local/share/zed"
            ];

            files = [
              ".wakatime.cfg"
              ".config/lan-mouse/lan-mouse.pem"
            ];
          };
        };
      };

      networking = {
        openssh.enable = true;
        netbird-client.enable = true;
      };

      virtualisation = {
        docker.enable = true;
        docker.nvidia.enable = true;
        qemu.enable = true;
        waydroid.enable = true;
        distrobox.enable = true;
      };

      programs.nix-ld.enable = true;
    };

    sops.secrets = {
      tux-password = {
        sopsFile = ./secrets.yaml;
        neededForUsers = true;
      };

      gemini-api-key = {
        sopsFile = ./secrets.yaml;
        owner = userName;
      };

      openrouter-api-key = {
        sopsFile = ./secrets.yaml;
        owner = userName;
      };

      opencode-go-api-key = {
        sopsFile = ./secrets.yaml;
        owner = userName;
      };

      zai-coding-plan-api-key = {
        sopsFile = ./secrets.yaml;
        owner = userName;
      };

      netbird-key = {
        sopsFile = ./secrets.yaml;
        owner = userName;
      };

      vicinae-json = {
        sopsFile = ./secrets.yaml;
        owner = userName;
      };
    };

    # --- Networking ---
    networking = {
      hostName = hostName;
      networkmanager = {
        enable = true;
        wifi.backend = "iwd";
      };
      wireless.iwd = {
        enable = true;
        settings = {
          Network = {
            EnableIPv6 = true;
          };
          Settings = {
            AutoConnect = true;
          };
        };
      };
      firewall.enable = false;
    };

    environment.systemPackages = with pkgs; [
      davinci-resolve
      telegram-desktop
      impala
    ];

    # !!! DO NOT CHANGE THIS !!!
    # This should match the version used at initial install.
    system.stateVersion = "26.05";
  };
}