{ pkgs, inputs, ... }: {
  nixpkgs.config.allowUnfree = true;
  nixpkgs.overlays = [ 
    inputs.nix-vscode-extensions.overlays.default
    # ==== Temp workaround for VSCODE
    ## https://github.com/nixos/nixpkgs/issues/543690 as of 2026-07-20
    (final: prev: {
      vscode = prev.vscode.overrideAttrs (oldAttrs: {
        postPatch = builtins.replaceStrings
          [ "Contents/Resources/app/node_modules/@vscode/ripgrep-universal" ]
          [ "Contents/Resources/app/node_modules.asar.unpacked/@vscode/ripgrep-universal" ]
          (oldAttrs.postPatch or "");
      });
    })
  ];
  ids.gids.nixbld = 350;
  security.pam.services.sudo_local.touchIdAuth = true;

  # 1Password SSH Socket
  environment.variables.SSH_AUTH_SOCK = "~/Library/Group Containers/2BU8OCWD5C.com.1password/t/agent.sock";

  # Set vim as default editor
  environment.variables.EDITOR = "vim";
  environment.variables.VISUAL = "vim";
  environment.variables.GIT_EDITOR = "vim";
  environment.variables.HOMEBREW_NO_ANALYTICS = "1";

  # Add Homebrew to PATH
  environment.systemPath = [ "/opt/homebrew/bin" "/opt/homebrew/sbin" "/Users/matthew.bessette/.local/bin" ];

  system.primaryUser = "matthew.bessette";
  users.users."matthew.bessette" = {
    name = "matthew.bessette";
    home = "/Users/matthew.bessette";
  };

  # Homebrew for Casks and specific binaries
  # In a nix-darwin setup, Homebrew packages are not actually stored inside the Nix store. 
  # Instead, nix-darwin acts as a manager that triggers the standard Homebrew installation 
  # process on your macOS system.
  homebrew = {
    enable = true;
    onActivation.cleanup = "uninstall";
    onActivation.autoUpdate = true;
    onActivation.upgrade = true;
    onActivation.extraFlags = [ "--force" ];
    # global.autoUpdate = true;
    taps = [
      "f1bonacc1/tap"
    ];
    brews = [
      "biome"

      # CLEO APP
      "ccache"
      "rbenv"
      "ruby-build"

      "f1bonacc1/tap/process-compose"

      # DEV
      "mise"
    ];
    casks = [

      # CLEO APP
      "zulu@17"
      "android-commandlinetools"
      "android-platform-tools"
      ###

      "1password-cli"
      "bruno" 
      "claude"
      "claude-code"
      "docker-desktop"
      "super-productivity"
      "kopiaui" 
      "libreoffice" 
      "obsidian"
      "postico"
      "sublime-text"
      "spotify"
      "yubico-yubikey-manager"
      "zoom"
    ];
  };

  nix.settings.experimental-features = "nix-command flakes";
  system.stateVersion = 4;
}