{ pkgs, ... }:

{
  hardware.xpadneo.enable = true;

  networking.firewall = {
    # KDE Connect
    allowedTCPPortRanges = [{ from = 1714; to = 1764; }];
    allowedUDPPortRanges = [{ from = 1714; to = 1764; }];
  };

  programs.dconf.enable = true;
  programs.droidcam.enable = true;

  xdg.portal = {
    enable = true;

    config = {
      common.default = [ "gtk" ];
      sway.default = [ "wlr" "gtk" ];
    };

    extraPortals = [
      pkgs.xdg-desktop-portal-gtk
      pkgs.xdg-desktop-portal-kde
    ];

    wlr.enable = true;
  };

  security.pam.services.swaylock = { };
  services.udisks2.enable = true;

  containers.postgres = {
    config = { lib, pkgs, ... }: {
      services.postgresql = {
        enable = true;
        package = pkgs.postgresql_16_jit;
        enableJIT = true;

        # https://pgtune.leopard.in.ua/#/
        # https://pgconfigurator.cybertec.at/

        settings = {
          # Connectivity
          max_connections = 20;
          superuser_reserved_connections = 3;

          # Memory Settings;
          shared_buffers = "1024 MB";
          work_mem = "32 MB";
          maintenance_work_mem = "320 MB";
          huge_pages = "off";
          effective_cache_size = "6 GB";
          effective_io_concurrency = 100; # concurrent IO only really activated if OS supports posix_fadvise function
          random_page_cost = 1.25; # speed of random disk access relative to sequential access (1.0)

          # Monitoring;
          shared_preload_libraries = "pg_stat_statements"; # per statement resource usage stats
          track_io_timing = "on"; # measure exact block IO times
          track_functions = "pl"; # track execution times of pl-language procedures if any

          # Replication;
          wal_level = "replica"; # consider using at least "replica"
          max_wal_senders = 0;
          synchronous_commit = "on";

          # Checkpointing:
          checkpoint_timeout = "15 min";
          checkpoint_completion_target = 0.9;
          max_wal_size = "1024 MB";
          min_wal_size = "512 MB";


          # WAL writing:
          wal_compression = "on";
          wal_buffers = -1; # auto-tuned by Postgres till maximum of segment size (16MB by default)
          wal_writer_delay = "200 ms";
          wal_writer_flush_after = "1 MB";


          # Background writer:
          bgwriter_delay = "200 ms";
          bgwriter_lru_maxpages = 100;
          bgwriter_lru_multiplier = 2.0;
          bgwriter_flush_after = 0;

          # Parallel queries:
          max_worker_processes = 6;
          max_parallel_workers_per_gather = 3;
          max_parallel_maintenance_workers = 3;
          max_parallel_workers = 6;
          parallel_leader_participation = "on";

          # Advanced features:
          enable_partitionwise_join = "on";
          enable_partitionwise_aggregate = "on";
          jit = "on";
          max_slot_wal_keep_size = "1000 MB";
          track_wal_io_timing = "on";
          maintenance_io_concurrency = 100;
          wal_recycle = "on";
        };
      };

      system.stateVersion = "23.11";
    };
  };
}
