# Edit this configuration file to define what should be installed on
# your system.  Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’).
{ config, lib, pkgs, ... }: {
  # Bootloader.
  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;

  # Setup keyfile
  boot.initrd.secrets = { "/crypto_keyfile.bin" = null; };

  # Enable swap on luks
  boot.initrd.luks.devices."luks-761eeb11-3091-4142-9232-4fb33165eccd".device =
    "/dev/disk/by-uuid/761eeb11-3091-4142-9232-4fb33165eccd";
  boot.initrd.luks.devices."luks-761eeb11-3091-4142-9232-4fb33165eccd".keyFile =
    "/crypto_keyfile.bin";

  environment = {
    etc."ppp/options".text = ''
      ipcp-accept-remote
    '';
    systemPackages = with pkgs; [ openfortivpn ];
  };
  services.syncthing.settings.folders = {
    "Archive".enable = false;
    "Books".enable = false;
    "Comics".enable = false;
    "Documents".enable = false;
    "Exports".enable = false;
    "Pictures".enable = false;
  };
}