nixconf/dev.nix

{ pkgs, ... }:

{
  # Docker
  virtualisation.docker.enable = true;

  virtualisation.docker.rootless = {
    enable = true;
    setSocketVariable = true;
    daemon.settings.features.cdi = true;
  };

  # Tailscale
  services.tailscale.enable = true;
  services.tailscale.useRoutingFeatures = "client";
  networking.nameservers = ["100.100.100.100"];
  networking.search = ["heron-velociraptor.ts.net"];
  networking.firewall.enable = false;

  # SSH
  services.openssh = {
    enable = true;
    ports = [ 22 ];
    settings = {
      PasswordAuthentication = true;
      AllowUsers = null;
      UseDns = true;
      X11Forwarding = false;
      PermitRootLogin = "yes"; # "yes", "without-password", "prohibit-password", "forced-commands-only", "no"
    };
  };

  # Dev packages
  environment.systemPackages = with pkgs; [
    pkgs.gnumake
    pkgs.go
    pkgs.gotools
    pkgs.go-swag
    pkgs.rustup
    pkgs.zig
    pkgs.fnm
    pkgs.rclone
    pkgs.git
    pkgs.helix
    pkgs.zed-editor
  ];
}