# ThinkPad T400 (NixOS). Shared laptop options live in ../../modules/laptop.nix;
# only host-specific settings are here.
{ ... }:

{
  imports = [
    ./hardware-configuration.nix
  ];

  # The T400 is legacy BIOS only (no UEFI), so boot via GRUB in BIOS mode.
  # `device` must point at the actual install disk -- adjust if it is not /dev/sda.
  boot.loader.grub = {
    enable = true;
    device = "/dev/sda";
  };

  networking.hostName = "T400-NixOS";

  console.font = "Lat2-Terminus16";

  services.pipewire = {
    enable = true;
    pulse.enable = true;
  };

  # This host accepts SSH, so open 22 (the firewall itself is enabled in
  # laptop.nix with a default-deny policy).
  services.openssh.enable = true;
  networking.firewall.allowedTCPPorts = [ 22 ];

  # The T400's fingerprint reader differs/may be absent; empty service still
  # lets swaylock authenticate via password.
  security.pam.services.swaylock = { };

  # Intel Core 2 (Penryn) microcode + redistributable firmware for the Intel
  # WiFi Link 5100/5300 iwlwifi blobs. The GMA 4500MHD works out of the box via
  # i915/KMS, so no extra graphics config is needed.
  hardware.cpu.intel.updateMicrocode = true;
  hardware.enableRedistributableFirmware = true;

  # See `man configuration.nix` / the stateVersion docs before changing.
  system.stateVersion = "26.05";
}