My_NixOS_Config/nixos/worklaptop/services.nix

{
  inputs,
  lib,
  config,
  pkgs,
  unstablePkgs,
  theme,
  ...
}: {
  services = {
    displayManager.defaultSession = "hyprland-uwsm";
    desktopManager.gnome.enable = false;
    displayManager.gdm.enable = false;
    greetd.enable = true;
    xserver = {
      videoDrivers = ["nvidia"]; # or "nvidiaLegacy470 etc.
      enable = true;
      xkb = {
        layout = "ie";
        variant = "";
      };
    };
    resolved.enable = true;
    upower.enable = true;
    tuned.enable = true;
    pulseaudio.enable = false;
    pipewire = {
      enable = true;
      alsa.enable = true;
      alsa.support32Bit = true;
      pulse.enable = true;

      extraConfig.pipewire."99-high-res-audio" = {
        "context.properties" = {
          "default.clock.rate" = 48000;
          "default.clock.allowed-rates" = [44100 48000 88200 96000 176400 192000];
        };
      };

      wireplumber.extraConfig."10-high-res-audio" = {
        "monitor.alsa.rules" = [
          {
            matches = [
              {"node.name" = "~alsa_output.*";}
            ];
            actions = {
              update-props = {
                "audio.format" = "S32LE";
              };
            };
          }
        ];
      };
    };

    gvfs.enable = true;
    tumbler.enable = true;

    # Enable flatpaks
    flatpak.enable = true;

    # Add guix, as it is a common tool for reproducibility in comp sci
    guix.enable = true;

    # Enable the OpenSSH daemon and other remote tools.
    openssh.enable = true;

    gnome.gnome-keyring.enable = true;
    pcscd.enable = true;
    udev = {
      packages = [
        pkgs.yubikey-personalization
      ];
    };
  };

  # Add custom services
  systemd.services = {
    greetd = {
      after = ["setup-user-vars.service"];
      requires = ["setup-user-vars.service"];
    };
    setup-user-vars = {
      description = "Set user profile vars";
      wantedBy = [
        "multi-user.target"
        "graphical-session.target"
      ];
      after = ["home.mount"];
      serviceConfig = {
        Type = "oneshot";
        ExecStart = ''
          ${pkgs.bash}/bin/bash -c " \
            mkdir -p /var/lib/AccountsService/{icons,users,wallpaper} && \
            cp ${theme.avatarSource} ${theme.avatar} && \
            echo '[User]\nSession=\nIcon=${theme.avatar}\nSystemAccount=false' > /var/lib/AccountsService/users/cianh && \
            chown root:root /var/lib/AccountsService/users/cianh && \
            chmod 0600 /var/lib/AccountsService/users/cianh && \
            chown root:root ${theme.avatar} && \
            chmod 0444 ${theme.avatar} && \
            cp ${theme.wallpaperSource} ${theme.wallpaper} && \
            chown root:root ${theme.wallpaper} && \
            chmod 0444 ${theme.wallpaper} \
          "
        '';
      };
    };
    pueued = {
      enable = true;
      description = "Pueue Daemon - CLI process scheduler and manager";
      wantedBy = ["default.target"];
      serviceConfig = {
        Restart = "no";
        ExecStart = "${pkgs.pueue.outPath}/bin/pueued -vv";
      };
    };
  };

  # Enable GPG signing
  security.pam.services.gdm.enableGnomeKeyring = true; # load gnome-keyring at startup
}