{ config, pkgs, ... }:

{
  networking.nameservers = [ "8.8.8.8" "1.1.1.1" ];
  networking.networkmanager.insertNameservers = [ "1.1.1.1" "8.8.8.8" ];
  networking.firewall.enable = false;

  programs.firefox.enable = true;

  nixpkgs.config.allowUnfree = true;
  environment.systemPackages = with pkgs; [ kitty amnezia-vpn ];

  security.sudo.extraRules = [{
    users = [ "ALL" ];
    commands = [{
      command = "/run/current-system/sw/bin/AmneziaVPN-service";
      options = [ "NOPASSWD" ];
    }];
  }];

  programs.neovim = {
    enable = true;
    defaultEditor = true;
    configure = {
      customRC = ''
        set runtimepath^=${pkgs.vimPlugins.jellybeans-vim}
        colorscheme jellybeans
        set number
        set cc=80
        set list
        set listchars=tab:→\ ,space:·,nbsp:␣,trail:•,eol:¶,precedes:«,extends:»
        if &diff
          colorscheme blue
        endif
      '';
      packages.myVimPackage = with pkgs.vimPlugins; { start = [ ctrlp ]; };
    };
  };

  programs.zsh.enable = true;

  boot = {

    plymouth = {
      enable = true;
      theme = "lone";
      themePackages = with pkgs;
        [
          (adi1090x-plymouth-themes.override { selected_themes = [ "lone" ]; })
        ];
    };

    consoleLogLevel = 3;
    initrd.verbose = false;
    kernelModules = [ "tun" ]; # for VPN
    kernelParams = [
      "quiet"
      "splash"
      "boot.shell_on_fail"
      "udev.log_priority=3"
      "rd.systemd.show_status=auto"
    ];
    loader.timeout = 0;
  };
}