{
  inputs,
  pkgs,
  ...
}:
{
  imports = [
    ./home-manager.nix
  ];

  # Set host platform for Apple Silicon
  nixpkgs = {
    hostPlatform = "aarch64-darwin";
    config = {
      allowUnfree = true;
    };
  };

  # Enable nix-darwin
  nix.settings.experimental-features = [
    "nix-command"
    "flakes"
  ];

  # switch to lix
  nix.package = pkgs.lixPackageSets.stable.lix;

  # Set hostname
  networking.hostName = "atalanta";

  # Define user
  users.users.kierank = {
    name = "kierank";
    home = "/Users/kierank";
  };

  system.primaryUser = "kierank";

  ids.gids.nixbld = 350;

  # Install packages
  environment.systemPackages = [
    # nix stuff
    pkgs.nixd
    pkgs.nil
    pkgs.nixfmt-rfc-style
    inputs.agenix.packages.aarch64-darwin.default
    # dev_langs
    pkgs.nodejs_22
    pkgs.unstable.bun
    pkgs.python3
    pkgs.go
    pkgs.gopls
    pkgs.gotools
    pkgs.go-tools
    pkgs.gcc
    pkgs.rustc
    pkgs.cargo
    pkgs.jdk
    pkgs.ruby
    pkgs.cmake
    pkgs.unstable.biome
    pkgs.unstable.apktool
    pkgs.nodePackages_latest.prisma
    pkgs.unstable.zola
    pkgs.mill
    pkgs.clang
    pkgs.clang-tools
    pkgs.ninja
    # tools
    pkgs.calc
    pkgs.nh
    pkgs.rustscan
    pkgs.vhs
    inputs.soapdump.packages.${pkgs.stdenv.hostPlatform.system}.default
  ];

  programs.direnv.enable = true;

  # import the secret
  age.identityPaths = [
    "/Users/kierank/.ssh/id_rsa"
  ];
  age.secrets = {
    wakatime = {
      file = ../../secrets/wakatime.age;
      path = "/Users/kierank/.wakatime.cfg";
      owner = "kierank";
    };
    bluesky = {
      file = ../../secrets/bluesky.age;
      owner = "kierank";
    };
    crush = {
      file = ../../secrets/crush.age;
      owner = "kierank";
    };
    context7 = {
      file = ../../secrets/context7.age;
      owner = "kierank";
    };
    frp-auth-token = {
      file = ../../secrets/frp-auth-token.age;
      owner = "kierank";
    };
  };

  environment.variables = {
    EDITOR = "nvim";
    SYSTEMD_EDITOR = "nvim";
    VISUAL = "nvim";
  };

  # nothing but finder in the doc
  system.defaults.dock = {
    persistent-apps = [ ];

    tilesize = 47;
    show-recents = false;
  };

  # allow using apple watch or touch id for sudo
  security.pam.services.sudo_local.touchIdAuth = true;
  security.pam.services.sudo_local.watchIdAuth = true;

  system.defaults = {
    finder.FXPreferredViewStyle = "Nlsv";
    finder.AppleShowAllExtensions = true;
    # expand the save dialogs
    NSGlobalDomain.NSNavPanelExpandedStateForSaveMode = true;
    NSGlobalDomain.NSNavPanelExpandedStateForSaveMode2 = true;
    LaunchServices.LSQuarantine = false; # disables "Are you sure?" for new apps
    loginwindow.GuestEnabled = false;

    NSGlobalDomain."com.apple.trackpad.scaling" = 0.875;

    CustomSystemPreferences = {
      "com.apple.DiskArbitration.diskarbitrationd" = {
        DADisableEjectNotification = true;
      };
    };

    CustomUserPreferences = {
      "com.apple.driver.AppleBluetoothMultitouch.mouse" = {
        MouseButtonMode = "TwoButton";
      };
      "com.apple.WindowManager" = {
        EnableTiledWindowMargins = false;
      };
      "com.apple.desktopservices" = {
        # Avoid creating .DS_Store files on network or USB volumes
        DSDontWriteNetworkStores = true;
        DSDontWriteUSBStores = true;
      };
      "com.apple.AdLib" = {
        allowApplePersonalizedAdvertising = false;
      };
      "com.apple.SoftwareUpdate" = {
        AutomaticCheckEnabled = true;
        # Check for software updates daily, not just once per week
        ScheduleFrequency = 1;
        # Download newly available updates in background
        AutomaticDownload = 1;
        # Install System data files & security updates
        CriticalUpdateInstall = 1;
      };
      # keybindings
      # Script to export symbolic hotkey configs from MacOS
      # https://gist.github.com/sawadashota/8e7ce32234e0f07a03e955f22ec4c0f9
      # Screenshot selected area to file with Cmd+Option+Shift+4
      "com.apple.symbolichotkeys" = {
        AppleSymbolicHotKeys = {
          # Screenshot selected area with Option+Cmd+Shift+4
          "30" = {
            enabled = true;
            value = {
              parameters = [
                52
                21
                1703936
              ];
              type = "standard";
            };
          };
          # Screenshot selected area to clipboard with Cmd+Shift+4
          "31" = {
            enabled = true;
            value = {
              parameters = [
                52
                21
                1179648
              ];
              type = "standard";
            };
          };
          # Fullscreen screenshot Option+Cmd+Shift+3
          "28" = {
            enabled = true;
            value = {
              parameters = [
                51
                20
                1703936
              ];
              type = "standard";
            };
          };
          # Fullscreen screenshot to clipboard Cmd+Shift+3
          "29" = {
            enabled = true;
            value = {
              parameters = [
                51
                20
                1179648
              ];
              type = "standard";
            };
          };
        };
      };
    };
  };

  # Used for backwards compatibility, please read the changelog before changing
  system.stateVersion = 4;
}