nixfiles/system/machine/X1/configuration.nix

# ThinkPad X1 (NixOS). Shared laptop options live in ../../modules/laptop.nix;
# only host-specific settings are here.
{ ... }:

{
  imports = [
    ./hardware-configuration.nix
  ];

  boot.loader.efi.canTouchEfiVariables = true;

  networking.hostName = "X1-NixOS";
  networking.domain = "client.cbg.emmaisvery.gay";

  console.font = "Lat2-Terminus16";

  services.pipewire = {
    enable = true;
    pulse.enable = true;
  };

  # This host accepts SSH, so open 22 (the firewall itself is enabled in
  # laptop.nix with a default-deny policy).
  services.openssh.enable = true;
  networking.firewall.allowedTCPPorts = [ 22 ];

  # Fingerprint reader: allow swaylock to authenticate via fprintd.
  services.fprintd.enable = true;
  security.pam.services.swaylock.fprintAuth = true;

  # See `man configuration.nix` / the stateVersion docs before changing.
  system.stateVersion = "24.11";
}