{ pkgs, ... }: {
  nixpkgs.config.allowUnfree = true;
  ids.gids.nixbld = 350;
  security.pam.services.sudo_local.touchIdAuth = true;

  # 1Password SSH Socket
  environment.variables.SSH_AUTH_SOCK = "~/Library/Group Containers/2BU8OCWD5C.com.1password/t/agent.sock";

  system.primaryUser = "matthew.bessette";
  users.users."matthew.bessette" = {
    name = "matthew.bessette";
    home = "/Users/matthew.bessette";
  };

  # Homebrew for Casks and specific binaries
  homebrew = {
    enable = true;
    onActivation.cleanup = "uninstall";
    taps = [ "bufbuild/buf" "jacobjohansen/tap" ];
    brews = [ "jacobjohansen/tap/rds-auth-proxy"];
    casks = [
      "android-commandlinetools"
      "android-platform-tools"
      "bruno" 
      "kopiaui" 
      "libreoffice" 
      "signal" 
      "spotify"
      "yubico-yubikey-manager" 
      "visual-studio-code"
      "zoom"
    ];
  };

  nix.settings.experimental-features = "nix-command flakes";
  system.stateVersion = 4;
}