{ config, pkgs, lib, inputs, ... }:

{
  environment.systemPackages = with pkgs; [
    inputs.nixos-conf-editor.packages.${pkgs.system}.nixos-conf-editor
    nodejs
    appimage-run
    seahorse
    vscode
    p7zip
    popsicle # balena-etcher
    shotcut
    gimp
    pdfarranger
    terminator
    libreoffice-qt
    transmission_4-qt
  ];

  boot.loader.grub.useOSProber = true;

  services = {
    xserver = {
      enable = true;

      displayManager = {
        lightdm.enable = true;
        sessionCommands = ''
          eval $(gnome-keyring-daemon --start --components=secrets,ssh)
          export SSH_AUTH_SOCK
        '';
      };

      desktopManager.cinnamon.enable = true;

      xkb = {
        layout = "au";
        variant = "";
      };
    };

    printing.enable = true;

    pipewire = {
      enable = true;
      alsa.enable = true;
      alsa.support32Bit = true;
      pulse.enable = true;
    };

    xrdp = {
      enable = true;
      defaultWindowManager = "cinnamon-session";
      openFirewall = true;
    };

    gnome.gnome-keyring.enable = true;
  };

  security = {
    rtkit.enable = true;
    pam.services.login.enableGnomeKeyring = true;
  };

  # The networkmanager group only exists when NM is actually enabled — the
  # lxc platform module force-disables it, so don't add the user to a group
  # that won't exist there.
  users.users.nixos.extraGroups = lib.mkIf config.networking.networkmanager.enable [ "networkmanager" ];

  programs.firefox.enable = true;

  nixpkgs.config.allowUnfree = true;
}