{ me, config, lib, pkgs, unstablePkgs, auxiliaryPkgs, ... }:

{
  imports = [
    ./nix.nix
    ./user.nix
    ./locale.nix
    ./vim.nix
    ./tmux.nix
    ./gnome.nix
    ./fonts.nix
    ./flatpak.nix
    ./libreoffice.nix
    ./nix-ld.nix
  ];

  boot.kernelPackages = pkgs.linuxPackages_latest;

  services.envfs.enable = true;
  virtualisation.libvirtd.enable = true;

  # fish enables this by default,
  # it makes every nixos rebuild very slow.
  documentation.man.generateCaches = false;

  # use corsac dns server
  networking.nameservers = let
    corsacTailnet = "100.64.100.100";
  in [ corsacTailnet ];
  services.resolved.enable = true;

  services = {
    acpid.enable = true;
    sysprof.enable = true;
    tailscale = {
      enable = true;
      useRoutingFeatures = "both";
      extraUpFlags = [ "--ssh" ];
    };
  
    # sometimes needed for gnupg
    pcscd.enable = true;
  };
 
  programs = {
    steam = {
      enable = true;
      remotePlay.openFirewall = true;
    };
    virt-manager.enable = true;
    fish.enable = true;
    git.enable = true;

    adb.enable = true;
    
    gnupg.agent = {
      enable = true;
      enableSSHSupport = true;
      pinentryPackage = pkgs.pinentry-gnome3;
    };
  };

  environment.systemPackages = (with pkgs; [
    file unzip jq dig htop wget gnupg pinentry-gnome3
    inetutils arp-scan pciutils lshw lsof inxi iw pmutils acpi acpid
    sysprof wireshark hardinfo
    vlc celluloid foliate calibre
    yt-dlp ffmpeg_7-full handbrake subtitlecomposer mpv helvum
    gimp krita aseprite mypaint rnote
    blender inkscape obs-studio darktable
    renderdoc
    audacity musescore reaper bitwig-studio
    lagrange senpai
    qemu_full virtiofsd

    openvpn openvpn3 update-resolv-conf
    
    xorg.xeyes wl-clipboard

    ripgrep hyperfine parallel fzf bat delta universal-ctags
    python3 black
    nodejs_22 deno yarn
    rustc rustup cargo rustfmt
    go gopls delve go-task gotags
    meson cmake gnumake gdb gcc clang clang-tools
    hare haredoc
    jdk maven gradle
    nil nixfmt-rfc-style direnv
    nixpkgs-review nixpkgs-fmt nixpkgs-lint-community
    helix alacritty

    wineWowPackages.stagingFull winetricks bottles
    scrcpy apfs-fuse
    borgbackup pika-backup

    prismlauncher xonotic
  ]) ++ (with unstablePkgs; [
    davinci-resolve muse-sounds-manager
  ]) ++ (with auxiliaryPkgs; [
    ghidra ngfx retroarch
  ]);

  environment.etc.openvpn.source = "${pkgs.update-resolv-conf}/libexec/openvpn";
}