# SPDX-License-Identifier: MIT
# SPDX-FileCopyrightText: 2021-2023, 2025 Alyssa Ross <hi@alyssa.is>

{ lib, modulesPath, pkgs, ... }:

let
  inherit (builtins) readFile;
in

{
  imports = [ (modulesPath + "/profiles/all-hardware.nix") ];

  boot.consoleLogLevel = lib.mkDefault 2;
  # quiet raises the kernel console threshold past the INFO chatter that
  # reaches the video console during boot (and silences the stage-1 script);
  # systemd.show_status=false stops PID 1's status lines. Every other
  # parameter from v1 measured as redundant or inert — see the cover letter.
  boot.kernelParams = [ "udev.log_priority=5" "quiet" "systemd.show_status=false" ];
  boot.initrd.verbose = false;

  boot.kernelPackages = pkgs.linuxPackages_latest;

  boot.plymouth.enable = true;
  boot.plymouth.logo = pkgs.callPackage (
    { runCommand, fetchurl, inkscape }:
    runCommand "spectrum-logo.png" {
      nativeBuildInputs = [ inkscape ];
      svg = fetchurl {
        url = "https://spectrum-os.org/git/www/plain/logo/logo_mesh.svg?id=5ac2d787b12e05a9ea91e94ca9373ced55d7371a";
        sha256 = "1k5025nc5mxdls7bw7wk1734inadvibqxvg8b8yg6arr3y9yy46k";
      };
    } ''
      inkscape -w 48 -h 48 -o "$out" "$svg"
    ''
  ) {};

  fileSystems."/" = { fsType = "tmpfs"; };

  services.cage.enable = true;
  services.cage.program = lib.getExe (pkgs.callPackage ./app {});

  services.udev.extraRules = ''
    KERNEL=="card0", TAG+="systemd"
  '';

  systemd.services.cage-tty1.after = [ "dev-dri-card0.device" ];
  systemd.services.cage-tty1.wants = [ "dev-dri-card0.device" ];

  # Force eos-installer to stop artificially constraining its size.
  systemd.services.cage-tty1.environment.GIS_SMALL_SCREEN = "1";

  users.users.demo = { group = "demo"; isNormalUser = true; };
  users.groups.demo = {};
  security.polkit.extraConfig = readFile ./seat.rules;

  services.udisks2.enable = true;

  documentation.enable = false;
  networking.firewall.enable = false;
  networking.resolvconf.enable = false;
  nix.enable = false;
  services.timesyncd.enable = false;

  boot.loader.systemd-boot.enable = true;

  environment.systemPackages = with pkgs; [ adwaita-icon-theme ];

  systemd.tmpfiles.rules = [
    "L+ /var/lib/eos-image-defaults/vendor-customer-support.ini - - - - ${app/vendor-customer-support.ini}"
  ];

  system.stateVersion = lib.trivial.release;
}