;; This is an operating system configuration template
;; for a "bare bones" setup, with no X11 display server.

(use-modules (gnu))
(use-service-modules networking ssh)
(use-package-modules screen ssh)

(operating-system
  (host-name "T500_GUIX")
  (timezone "Australia/Brisbane")
  (locale "en_AU.utf8")

  ;; Set up a condition where grub.cfg is generated but grub is 
  ;; not actually installed. For use with Libreboot.
  (bootloader 
    (bootloader-configuration
      (bootloader
        (bootloader
          (inherit grub-bootloader)
          (installer #~(const #t))))))

  ;; Specify a mapped device for the encrypted luks partition.
  ;; The UUID is that returned by 'cryptsetup luksUUID'.
  (mapped-devices
   (list (mapped-device
          (source (uuid "76ef34a8-8690-4613-a5e3-ded5d8c82d01"))
          (target "cryptlvm")
          (type luks-device-mapping))
         ;; Specify a mapped device for each LVM logical volume 
         ;; inside the luks partition.
         (mapped-device
          (source "GUIXVG")
          (targets
           (list 
            "GUIXVG-rootvol"
            "GUIXVG-homevol"
            "GUIXVG-swapvol"))
          (type lvm-device-mapping))))

  (file-systems (append
                 (list (file-system
                         (device (file-system-label "rootfs"))
                         (mount-point "/")
                         (type "ext4")
                         (dependencies mapped-devices))
                       (file-system
                         (device (file-system-label "homefs"))
                         (mount-point "/home")
                         (type "ext4")
                         (dependencies mapped-devices))
                 %base-file-systems)))

  (swap-devices 
    (append
      (list
        (swap-space
          (target "/dev/mapper/GUIXVG-swapvol")
          (dependencies mapped-devices)))))



  ;; This is where user accounts are specified.  The "root"
  ;; account is implicit, and is initially created with the
  ;; empty password.
  (users (cons (user-account
                (name "user")
                (comment "User")
                (group "users")

                ;; Adding the account to the "wheel" group
                ;; makes it a sudoer.  Adding it to "audio"
                ;; and "video" allows the user to play sound
                ;; and access the webcam.
                (supplementary-groups '("wheel"
                                        "audio" "video")))
               %base-user-accounts))

  ;; Globally-installed packages.
  (packages (cons screen %base-packages))

  ;; Add services to the baseline: a DHCP client and
  ;; an SSH server.
  (services (append (list (service dhcp-client-service-type)
                          (service openssh-service-type
                                   (openssh-configuration
                                    (openssh openssh-sans-x)
                                    (port-number 2222))))
                    %base-services)))