config/modules/desktop/default.nix

{ pkgs, config, inputs, lib, ... }: let
  portRanges = [
    # GSConnect
    { from = 1716; to = 1764; }
  ];
in {
  imports = [
    ./package-sets.nix
    ./nixpak-tricks.nix
    ./hidden-apps.nix
  ];

  services.xserver = {
    enable = true;
    displayManager.gdm.enable = true;
    desktopManager.gnome = {
      enable = true;
      extraGSettingsOverrides = builtins.readFile ./gsettings.conf;
      favoriteAppsOverride = builtins.readFile ./appbar.conf;
    };
  };

  programs.adb.enable = true;

  environment.gnome.excludePackages = with pkgs.gnome; [
    cheese
    gnome-logs
    gnome-music
    totem
    pkgs.gnome-photos
    pkgs.gnome-tour
  ];

  desktop.hiddenApps = [
    "startcenter.desktop" # LibreOffice Start Center
    "xterm.desktop"
    "cups.desktop"
    "scrcpy-console.desktop"
  ];

  environment.variables = {
    EDITOR = "hx";
    SSH_ASKPASS = lib.mkForce "";
  };

  fonts.fonts = with pkgs; [
    terminus_font_fancy
    terminus_font_ttf
    nerdfonts-terminus
    noto-fonts
  ];

  security = {
    sudo.enable = false;
    doas.enable = true;
    doas.extraRules = lib.mkForce [ rec {
      groups = [ "wheel" ];
      noPass = !config.services.fprintd.enable;
      persist = !noPass;
    }];
  };

  services.printing.enable = true;

  networking.firewall.allowedTCPPortRanges = portRanges;
  networking.firewall.allowedUDPPortRanges = portRanges;

  services.avahi.enable = false;

  services.fwupd.enable = true;

  boot = {
    loader.timeout = 0;
    initrd.verbose = false;
    consoleLogLevel = 0;
    kernelParams = [ "quiet" "udev.log_priority=3" ];
    plymouth.enable = true;
  };

  zramSwap.enable = true;
  zramSwap.algorithm = "zstd";

  services.packagekit.enable = lib.mkForce false;
  programs.gnome-terminal.enable = false;

  qt = {
    enable = true;
    platformTheme = "gtk2";
    style = "gtk2";
  };

  virtualisation.libvirtd.enable = true;

  services.printing.drivers = with pkgs; [ hplip gutenprint ];
}