;;; SPDX-License-Identifier: GPL-3.0-or-later
;;; SPDX-FileCopyrightText: 2026 Marek Paśnikowski <marek@marekpasnikowski.pl>

;;; COPYRIGHT NOTICE
;;;
;;; Copyright 2026, Marek Paśnikowski <marek@marekpasnikowski.pl>

;;; LICENSE NOTICE
;;;
;;; This library is free software: you can redistribute it and/or modify it under the terms of
;;; the GNU General Public License as published by the Free Software Foundation,
;;; either version 3 of the License, or (at your option) any later version.
;;;
;;; This library is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY;
;;; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
;;; See the GNU General Public License for more details.
;;;
;;; You should have received a copy of the GNU General Public License along with this library.
;;; If not, see <https://www.gnu.org/licenses/>.

(define-module (users id1000)
  #:use-module (guix gexp)
  #:use-module (sovereign services mail)
  #:use-module ( (gnu home)
                 #:prefix gnu:home:)
  #:use-module ( (gnu home services)
                 #:prefix gnu:home:services:)
  #:use-module ( (gnu home services desktop)
                 #:prefix gnu:home:services:desktop:)
  #:use-module ( (gnu home services shepherd)
                 #:prefix gnu:home:services:shepherd:)
  #:use-module ( (gnu home services sound)
                 #:prefix gnu:home:services:sound:)
  #:use-module ( (gnu home services ssh)
                 #:prefix gnu:home:services:ssh:)
  #:use-module ( (gnu packages audio)
                 #:prefix gnu:packages:audio:)
  #:use-module ( (gnu packages disk)
                 #:prefix gnu:packages:disk:)
  #:use-module ( (gnu packages version-control)
                 #:prefix gnu:packages:version-control:)
  #:use-module ( (gnu services)
                 #:prefix gnu:services:)
  #:use-module ( (gnu system accounts)
                 #:prefix gnu:system:accounts:)
  #:use-module ( (sovereign packages emacs)
                 #:prefix sovereign:packages:emacs:)
  #:use-module ( (sovereign services admin)
                 #:prefix sovereign:services:admin:)
  #:use-module ( (sovereign services fontutils)
                 #:prefix sovereign:services:fontutils:)
  #:use-module ( (sovereign system accounts)
                 #:prefix sovereign:system:accounts:)
  #:use-module ( (sovereign systems)
                 #:prefix sovereign:systems:))

(define dkimproxy-signature-dkim
  (dkimproxy-out-signature-configuration
   (algorithm "rsa-sha256")
   (key "/etc/mail/dkim/marekpasnikowski.pl.key")
   (method "relaxed")
   (selector "dkim")
   (type 'dkim)))

(define dkimproxy-signature-domainkeys
  (dkimproxy-out-signature-configuration
   (method "mofws")
   (type 'domainkeys)))

;;;;;

(define dkimproxy-signatures-marekpasnikowski
  (list dkimproxy-signature-dkim
	dkimproxy-signature-domainkeys))

(define dovecot-imap-login-inet-configuration
  ((@ (gnu services mail) inet-listener-configuration)
   (address "192.168.1.2")
   (port 993)
   (protocol "imaps")))

(define dovecot-lmtp-inet-configuration
  ((@ (gnu services mail) inet-listener-configuration)
   (address "192.168.1.2 127.0.0.1")
   (port 24)
   (protocol "lmtp")))

(define dovecot-lmtp-unix-configuration
  ((@ (gnu services mail) unix-listener-configuration)
   (group "vmail")
   (mode "0666")
   (path "lmtp")
   (user "vmail")))

(define mailbox-marekpasnikowski-archive
  ((@ (gnu services mail) mailbox-configuration)
   (name "Archive")
   (auto "subscribe")
   (special-use (list "\\Archive"))))

(define mailbox-marekpasnikowski-drafts
  ((@ (gnu services mail) mailbox-configuration)
   (name "Drafts")
   (auto "subscribe")
   (special-use (list "\\Drafts"))))

(define mailbox-marekpasnikowski-junk
  ((@ (gnu services mail) mailbox-configuration)
   (name "Junk")
   (auto "subscribe")
   (special-use (list "\\Junk"))))

(define mailbox-marekpasnikowski-sent
  ((@ (gnu services mail) mailbox-configuration)
   (name "Sent")
   (auto "subscribe")
   (special-use (list "\\Sent"))))

(define mailbox-marekpasnikowski-trash
  ((@ (gnu services mail) mailbox-configuration)
   (name "Trash")
   (auto "subscribe")
   (special-use (list "\\Trash"))))

;;;

(define dkimproxy-sender-marekpasnikowski
  `("marekpasnikowski.pl" ,dkimproxy-signatures-marekpasnikowski))

(define dovecot-imap
  ((@ (gnu services mail) protocol-configuration)
   (name "imap")))

(define dovecot-imap-login-configuration
  ((@ (gnu services mail) service-configuration)
   (kind "imap-login")
   (listeners (list dovecot-imap-login-inet-configuration))))

(define dovecot-lmtp
  ((@ (gnu services mail) protocol-configuration)
   (name "lmtp")))

(define dovecot-lmtp-configuration
  ((@ (gnu services mail) service-configuration)
   (kind "lmtp")
   (listeners (list dovecot-lmtp-inet-configuration
		    dovecot-lmtp-unix-configuration))))

(define dovecot-passwd-file
  ((@ (gnu services mail) passdb-configuration)
   (args (list "username_format=%n"
	       "/secrets/dovecot"))
   (driver "passwd-file")))

(define dovecot-namespace-marekpasnikowski
  ((@ (gnu services mail) namespace-configuration)
   (name "inbox")
   (inbox? #t)
   (mailboxes (list mailbox-marekpasnikowski-archive
		    mailbox-marekpasnikowski-drafts
		    mailbox-marekpasnikowski-junk
		    mailbox-marekpasnikowski-sent
		    mailbox-marekpasnikowski-trash))))

(define dovecot-userdb-static-configuration
  ((@ (gnu services mail) userdb-configuration)
   (args (list "gid=vmail"
	       "home=/home/vmail/%n"
	       "uid=vmail"))
   (driver "static")))

(define ssl-cert-path
  (string-append "</etc/letsencrypt/live/"
		 "marekpasnikowski.pl"
		 "/fullchain.pem"))

(define ssl-key-path
  (string-append "</etc/letsencrypt/live/"
		 "marekpasnikowski.pl"
		 "/privkey.pem"))

;;;

(define dkimproxy-out-configuration*
  (dkimproxy-out-configuration
   (listen "127.0.0.1:10027")
   (relay "127.0.0.1:10028")
   (sender-map `(,dkimproxy-sender-marekpasnikowski))))

(define dovecot-configuration*
  ((@ (gnu services mail) dovecot-configuration)
   (disable-plaintext-auth? #t)
   (mail-location "maildir:~/Maildir")
   (namespaces (list dovecot-namespace-marekpasnikowski))
   (passdbs (list dovecot-passwd-file))
   (protocols (list dovecot-imap
		    dovecot-lmtp))
   (services (list dovecot-lmtp-configuration
		   dovecot-imap-login-configuration))
   (ssl? "required")
   (ssl-cert ssl-cert-path)
   (ssl-key ssl-key-path)
   (ssl-min-protocol "TLSv1.2")
   (userdbs (list dovecot-userdb-static-configuration))))

(define groups
  (list "audio"
	;; "libvirt"
	"netdev"
	"video"
	"wheel"))

;;;

(define environment-variables
  (let
    ( (l-variables (list '("EDITOR" . "kate -s sesja -b"))))
    (gnu:services:simple-service 'id1000-environment-variables
                                gnu:home:services:home-environment-variables-service-type
                                l-variables)))

(define-public dkim-service
  (gnu:services:service dkimproxy-out-service-type
	   dkimproxy-out-configuration*))

(define-public dovecot-service
  (gnu:services:service (@ (gnu services mail) dovecot-service-type)
	   dovecot-configuration*))

(define openssh-host/*
  (gnu:home:services:ssh:openssh-host
    (name          "top-level")
    (host-name     "*")
    (extra-content (string-append "ServerAliveInterval 5\n"
                                  "ServerAliveCountMax 11\n"))))

(define openssh-configuration
  (let
    ( (l-aisaka   (mixed-text-file "aisaka-openssh-keys"
                                   "aisaka ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM0Eh0q54myeSEironEP9DEKl+ownYuH7oSgAVuLIDNt\n"
                                   "[git.marekpasnikowski.pl]:23 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM0Eh0q54myeSEironEP9DEKl+ownYuH7oSgAVuLIDNt\n"
                                   "[www.marekpasnikowski.pl]:23 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM0Eh0q54myeSEironEP9DEKl+ownYuH7oSgAVuLIDNt\n"))
      (l-akashi   (mixed-text-file "akashi-openssh-keys"
                                   "akashi ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICtEYtiph2TwshHHSQhLL7A2ZvFMCogWuI8vfS3jLQsm\n"))
      (l-marek    (mixed-text-file "marek-openssh-keys"
                                   "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK4THTYnHCc/ihCJNKJtGTNu1zCnLndbMHnxnrxzJk+N marek@aisaka\n"
                                   "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFzC1VvW6TB4pMuGyfTM36T7Ar7FZqSXc7kCoVDNwtUX marek@akashi\n"
                                   "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOI2JPx6s3okqMcrOX62pioWZwp8ybSICSKzILHRuxHV marek@asuna\n"
                                   "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJew7ti1qr545Z6OUZ/xcNUg7ib6P0pTbSZqFpSvNhKU marek@mcdowell\n"
                                   "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICBo2coChmWHQn9BEbp0dA7DQG7CPEweVcsmnaIVmXyR marek@rakan\n"))
      (l-mcdowell (mixed-text-file "mcdowell-openssh-keys"
                                   "mcdowell ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP/EueZjfqWhdML17z+Da7+KWHofXBpP020ff1vKedOr\n"))
      (l-rakan    (mixed-text-file "rakan-openssh-keys"
                                   "rakan ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFxlIhNlkWCNA+l/RiOJztB+VWhuJtDTUvSwwlE3MpgJ\n"
                                   "[www.marekpasnikowski.pl]:24 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFxlIhNlkWCNA+l/RiOJztB+VWhuJtDTUvSwwlE3MpgJ\n")))
    (gnu:home:services:ssh:home-openssh-configuration
      (hosts           (list openssh-host/*))
      (known-hosts     (list l-aisaka
                             l-akashi
                             l-mcdowell
                             l-rakan))
      (authorized-keys (list l-marek)))))

(define openssh
  (gnu:services:service
    gnu:home:services:ssh:home-openssh-service-type
    openssh-configuration))

(define-public uid1000-name
  "marek")

(define-public uid1000-account
  (gnu:system:accounts:user-account
    (name                 uid1000-name)
    (password             #f)
    (uid                  1000)
    (group                "users")
    (supplementary-groups groups)
    (comment              "Marek Paśnikowski")
    (home-directory       "/home/marek")))

(define-public uid1000-home-environment
  (let
    ( (l-gitconfig-file        (local-file "uid1000-gitconfig")) ; TODO modularize
      (l-gitignore-file        (local-file "uid1000-gitignore")) ; TODO review the contents
      (l-home-dbus-service     (gnu:services:service gnu:home:services:desktop:home-dbus-service-type))
      (l-home-files            `( (".test-channels.scm" ,(local-file "./uid1000-test-channels.scm"))))
      (l-home-pipewire-service (gnu:services:service gnu:home:services:sound:home-pipewire-service-type))
      (l-home-shepherd-service (gnu:services:service gnu:home:services:shepherd:home-shepherd-service-type)))
    (let
      ( (l-gitconfig          (list "git/config"
                                    l-gitconfig-file))
        (l-gitignore          (list "git/ignore"
                                    l-gitignore-file))
        (l-fontconfig         (sovereign:services:fontutils:home-fontconfig-service-type #f
                                                                                         #f
                                                                                         "Noto"))
        (l-home-files-service (gnu:services:simple-service 'home-files
                                                           gnu:home:services:home-files-service-type
                                                           l-home-files)))
      (let*
        ( (l-git-configuration-files (list l-gitconfig
                                           l-gitignore))
          (l-git-configuration       (gnu:services:simple-service 'git-configuration
                                                                  gnu:home:services:home-xdg-configuration-files-service-type
                                                                  l-git-configuration-files))
          (l-user-services           (list sovereign:systems:bash-configuration
                                           environment-variables
                                           l-git-configuration
                                           l-home-files-service
                                           l-fontconfig)))
        (gnu:home:home-environment
          (packages (cons* gnu:packages:version-control:git
                           gnu:packages:disk:gparted
                           sovereign:systems:common-home-environment-packages))
          (services (cons* sovereign:services:admin:update-commands
                           l-home-dbus-service
                           l-home-pipewire-service
                           l-home-shepherd-service
                           openssh
                           sovereign:packages:emacs:spacemacs-home-files
                           sovereign:packages:emacs:spacemacs-home-profile
                           sovereign:packages:emacs:spacemacs-variables
                           l-user-services)))))))

(define-public named-home-environment
  (list uid1000-name
        uid1000-home-environment))