{ config, lib, pkgs, ... }:

let local-domain = "sea.fudo.org";
in {
  fileSystems = {
    "/mnt/documents" = {
      device = "whitedwarf.${local-domain}:/volume1/Documents";
      fsType = "nfs4";
      options = [ "comment=systemd.automount" ];
    };
    "/mnt/downloads" = {
      device = "whitedwarf.${local-domain}:/volume1/Downloads";
      fsType = "nfs4";
      options = [ "comment=systemd.automount" ];
    };
    "/mnt/music" = {
      device = "doraemon.${local-domain}:/volume1/Music";
      fsType = "nfs4";
      options = [ "comment=systemd.automount" ];
    };
    "/mnt/video" = {
      device = "doraemon.${local-domain}:/volume1/Video";
      fsType = "nfs4";
      options = [ "comment=systemd.automount" ];
    };
    # fileSystems."/mnt/security" = {
    #   device = "panopticon.${local-domain}:/srv/kerberos/data";
    #   fsType = "nfs4";
    # };
    "/mnt/cargo_video" = {
      device = "cargo.${local-domain}:/volume1/video";
      fsType = "nfs4";
      options = [ "comment=systemd.automount" ];
    };
    "/mnt/photo" = {
      device = "cargo.${local-domain}:/volume1/pictures";
      fsType = "nfs4";
      options = [ "comment=systemd.automount" ];
    };
    # "/net/documents" = {
    #   device = "sea-store.${local-domain}:/export/documents";
    #   fsType = "nfs";
    #   options = [
    #     "nfsvers=4.2"
    #     "comment=systemd.automount"
    #     "sec=krb5p"
    #     # "noauto" ?
    #   ];
    # };
    # "/net/downloads" = {
    #   device = "sea-store.${local-domain}:/export/downloads";
    #   fsType = "nfs";
    #   options = [
    #     "nfsvers=4.2"
    #     "comment=systemd.automount"
    #     "sec=krb5i"
    #     # "noauto" ?
    #   ];
    # };
  };

  systemd.mounts = [
    {
      what = "sea-store.sea.fudo.org:/export/documents";
      where = "/net/documents";
      type = "nfs4";
      options = "sec=krb5p";
      description = "sea-store documents on encrypted filesysem.";
    }
    {
      what = "sea-store.sea.fudo.org:/export/downloads";
      where = "/net/downloads";
      type = "nfs4";
      options = "sec=krb5i";
      description = "sea-store downloads on encrypted filesysem.";
    }
  ];

  krb5 = {
    domain_realm = {
      "fudo.org" = "FUDO.ORG";
      ".fudo.org" = "FUDO.ORG";
      "sea.fudo.org" = "FUDO.ORG";
      ".sea.fudo.org" = "FUDO.ORG";
    };
    realms = {
      "FUDO.ORG" = {
        admin_server = "france.fudo.org";
        kdc = [ "france.fudo.org" ];
      };
    };
  };

  services.printing = {
    enable = true;
    drivers = [
      # pkgs.brlaser
      # pkgs.brgenml1lpr
      # pkgs.brgenml1cupswrapper
      # pkgs.hll2380dw-cups

      # pkgs.hll2380dw-lpr
    ];
  };

  environment.systemPackages = with pkgs; [ hll2380dw-cups ];
}