{ pkgs, ... }:
let
  shellAliases = {
    update-boot = "sudo nixos-rebuild boot --max-jobs 10 --build-host admin@10.0.1.3";
    update-switch = "sudo nixos-rebuild switch --max-jobs 10 --build-host admin@10.0.1.3";
    update-flake = "nix flake update desktop-nixpkgs desktop-chaotic desktop-home-manager desktop-impermanence desktop-lanzaboote desktop-nixos-hardware desktop-sops-nix desktop-steam-rom-manager --flake /etc/nixos";
    update-nas = "nixos-rebuild switch --use-remote-sudo --target-host admin@10.0.1.3 --build-host admin@10.0.1.3 --flake ~/nix-config#jallen-nas";
  };
in
{
  home.username = "matt";

  sops = {
    age.keyFile = "/home/matt/.config/sops/age/keys.txt";
    defaultSopsFile = "/etc/nixos/secrets/secrets.yaml";
    validateSopsFiles = false;
    secrets = {
      "ssh-keys-public/desktop-nixos" = {
        path = "/home/matt/.ssh/id_ed25519.pub";
        mode = "0644";
      };
      "ssh-keys-private/desktop-nixos" = {
        path = "/home/matt/.ssh/id_ed25519";
        mode = "0600";
      };
    };
  };

  services = {
    remmina = {
      enable = true;
      addRdpMimeTypeAssoc = true;
    };
  };

  programs = {
    password-store.enable = true;

    zsh.shellAliases = shellAliases;
  };

  home.packages = with pkgs; [
    bottles
    unstable.compose2nix
    discord
    heroic
    stable.vmware-horizon-client
    jq
    lutris
    lzip
    morph
    orca-slicer
    piper
    prismlauncher
    protontricks
    protonvpn-gui
    python3
    qmk
    smile
    unigine-heaven
    via
    virt-manager
    vorta
    waydroid-helper
  ];
}