# Module: Laptop Secrets & Base Configuration
# Description: Secrets management (sops-nix) and keyboard layout
# Services: sops-nix
# Dependencies: sops-nix for secrets management
# Note: Other laptop features (gaming, virtualization, etc.) are in separate modules

{ customConfig, ... }:

let
  userHome = "/home/${customConfig.username}";
in
{
  sops.validateSopsFiles = false;
  sops.age.keyFile = "${userHome}/.config/sops/age/keys.txt";
  
  # WiFi networks configuration - entire network list encrypted
  sops.secrets.wifi-networks = {
    path = "/run/secrets/wifi-networks.conf";
    sopsFile = ../../secrets/wifi-networks.yaml;
    format = "yaml";
    key = "wifi-networks";
    owner = "wpa_supplicant";
    group = "wpa_supplicant";
    mode = "0400";
  };

  sops.secrets.zwift = {
    path = "${userHome}/.config/zwift/config";
    sopsFile = ../../secrets/zwift.yaml;
    owner = customConfig.username;
    group = "users";
    mode = "0400";
  };

  services.xserver.xkb.layout = "fr";
}