;; This is an operating system configuration template
;; for a "desktop" setup with GNOME and Xfce where the
;; root partition is encrypted with LUKS.

(use-modules (gnu)
	     (gnu system nss)
	     (gnu services ssh)
	     (gnu services xorg)
	     (guix-at-duke services endpoint-management))
(use-service-modules desktop)
(use-package-modules certs gnome)

(operating-system
  (host-name "lib-its13")
  (timezone "America/New_York")
  (locale "en_US.utf8")

  ;; Use the UEFI variant of GRUB with the EFI System
  ;; Partition mounted on /boot/efi.
  (bootloader (bootloader-configuration
                (bootloader grub-efi-bootloader)
                (target "/boot/efi")))

  (file-systems (cons* (file-system
                        (device (file-system-label "lib-its13_root"))
                        (mount-point "/")
                        (type "ext4"))
		       (file-system
			 (device (file-system-label "EFI"))
			 (mount-point "/boot/efi")
			 (type "vfat"))
                      %base-file-systems))

  (users (cons (user-account
                (name "install")
                (comment "installation user")
                (group "users")
                (supplementary-groups '("wheel" "netdev"
                                        "audio" "video"))
                (home-directory "/home/install"))
               %base-user-accounts))

  ;; This is where we specify system-wide packages.
  (packages (cons* nss-certs         ;for HTTPS access
                   gvfs              ;for user mounts
                   %base-packages))

  ;; Add GNOME and/or Xfce---we can choose at the log-in
  ;; screen with F1.  Use the "desktop" services, which
  ;; include the X11 log-in service, networking with
  ;; NetworkManager, and more.
  (services (cons* (service openssh-service-type (openssh-configuration))
		   (gnome-desktop-service)
		   (service gdm-service-type)
		   ;; (service planisphere-report-service-type)
                   (filter (lambda (x)
		   	     (not (eq? (service-kind x) slim-service-type))) %desktop-services)))

  ;; Allow resolution of '.local' host names with mDNS.
  (name-service-switch %mdns-host-lookup-nss))