;; GuixSD configuration file for the Novena build machines.
;; Copyright © 2016, 2017, 2018 Ludovic Courtès <ludo@gnu.org>
;; Copyright © 2019, 2020 Andreas Enge <andreas@enge.fr`
;; Released under the GNU GPLv3 or any later version.

(use-modules (guix) (gnu) (gnu bootloader u-boot))
(use-service-modules networking mcron ssh)
(use-package-modules bootloaders screen ssh linux vim)

(define (sysadmin name full-name)
  (user-account
   (name name)
   (comment full-name)
   (group "users")
   (supplementary-groups '("wheel" "kvm"))
   (home-directory (string-append "/home/" name))))

(define %accounts
  (list (sysadmin "andreas" "Andreas Enge")
        (user-account
         (name "hydra")
         (comment "Hydra User")
         (group "users")
         (home-directory (string-append "/home/" name)))
        (user-account
         (name "bayfront")
         (comment "Bayfront Offload")
         (group "users")
         (home-directory (string-append "/home/" name)))))

(define %authorized-guix-keys
  ;; List of authorized 'guix archive' keys.
  (list (local-file "keys/guix/berlin.guixsd.org-export.pub")
        (local-file "keys/guix/bayfront.guix.info-export.pub")))

(define gc-job
  ;; Run 'guix gc' at 3AM every day.
  #~(job '(next-hour '(3)) "guix gc -F 50G"))


;; The actual machine.

(operating-system
  (host-name "redhill")
  (timezone "Europe/Paris")
  (locale "en_US.UTF-8")

  (bootloader (bootloader-configuration
               (bootloader u-boot-novena-bootloader)
               (target "/dev/mmcblk1")))
  ;; These modules are required to mount the SATA partition.
  ;; Suggested by Vagrant Cascadian; they might not actually be needed
  ;; for us.
  (initrd-modules (cons* "ahci_imx" "libata" "sd_mod"
                         %base-initrd-modules))

  (file-systems (cons* (file-system
                         (device (uuid "f1062993-3776-47d2-8900-9e4f1d9fc8aa"))
                         (mount-point "/")
                         (type "ext4"))
                       %base-file-systems))

  (users (append %accounts %base-user-accounts))
  (services (cons* (service openssh-service-type
                            (openssh-configuration
                             (permit-root-login 'without-password)
                             (authorized-keys
                              `(("andreas" ,(local-file "keys/ssh/andreas.pub"))
                                ("root" ,(local-file "keys/ssh/andreas.pub"))))))
                   (service dhcp-client-service-type)
                   (service mcron-service-type
                            (mcron-configuration
                             (jobs (list gc-job))))

                   (service agetty-service-type
                            (agetty-configuration
                             (extra-options '("-L"))
                             (tty "ttymxc1")
                             (term "screen")
                             (baud-rate "115200")))

                   (service ntp-service-type)

                   (modify-services %base-services
                     (guix-service-type config =>
                                        (guix-configuration
                                         (inherit config)
                                         (use-substitutes? #f)
                                         (max-silent-time 7200)
                                         (authorized-keys
                                          %authorized-guix-keys))))))

  (packages (cons* screen openssh u-boot-novena vim %base-packages)))