{ pkgs, ... }:
{
  imports = [
    ./users.nix
    ./nix.nix

    ../../modules/desktop.nix
  ];

  programs = {
    fish.enable = true;
    nix-ld.enable = true;
  };

  security = {
    polkit.enable = true;
    rtkit.enable = true;
  };

  services = {
    tailscale.enable = true;
    openssh = {
      enable = true;
      ports = [ 22 ];
      settings = {
        PasswordAuthentication = true;
        PermitRootLogin = "prohibit-password";
      };
    };
  };

  time.timeZone = "Europe/London";
  i18n = {
    defaultLocale = "en_GB.UTF-8";
    extraLocaleSettings = {
      LC_ADDRESS = "en_GB.UTF-8";
      LC_IDENTIFICATION = "en_GB.UTF-8";
      LC_MEASUREMENT = "en_GB.UTF-8";
      LC_MONETARY = "en_GB.UTF-8";
      LC_NAME = "en_GB.UTF-8";
      LC_NUMERIC = "en_GB.UTF-8";
      LC_PAPER = "en_GB.UTF-8";
      LC_TELEPHONE = "en_GB.UTF-8";
      LC_TIME = "en_GB.UTF-8";
    };
  };

  environment.systemPackages = with pkgs; [
    # dev tools
    htop
    vim
    ripgrep
    fd

    git
    just
    jq

    nixd
    nil
    nixfmt-tree
    nixfmt

    sqlite
    nmap
    dig
    uv
    python
    nodejs

    # file
    unzip
    zip
    file
    tree
    tree-from-tags
    fuse3

    # networking
    wget
    curl
    openssl
    wirelesstools

    # media
    mpv
    imv
    imagemagick
    playerctl
    ffmpeg

    # whatever
    gnupg
    killall
    gnome-keyring
    libsecret

    fastfetch
    hyfetch
    kittysay

    nautilus
  ];
}