{ ... }:
let
  shellAliases = {
    ll = "ls -alh";
    update-boot = "sudo nixos-rebuild boot --max-jobs 10";
    update-switch = "sudo nixos-rebuild switch --max-jobs 10";
    update-flake = "nix flake update ~/nix-config";
    ducks = "du -cksh * | sort -hr | head -n 15";
  };

  gitAliases = {
    co = "checkout";
    ci = "commit";
    cia = "commit --amend";
    s = "status";
    st = "status";
    b = "branch";
    p = "pull --rebase";
    pu = "push";
  };
in
{
  home.username = "admin";
  home.homeDirectory = "/home/admin";
  home.stateVersion = "23.11";

  sops = {
    age.keyFile = "/home/admin/.config/sops/age/keys.txt";
    defaultSopsFile = "/etc/nixos/secrets/secrets.yaml";
    validateSopsFiles = false;
    secrets = {
      "ssh-keys-public/jallen-nas" = {
        path = "/home/admin/.ssh/id_ed25519.pub";
        mode = "0644";
      };
      "ssh-keys-private/jallen-nas" = {
        path = "/home/admin/.ssh/id_ed25519";
        mode = "0600";
      };
      "ssh-keys-public/desktop-nixos" = {
        path = "/home/admin/.ssh/authorized_keys";
        mode = "0600";
      };

      "ssh-keys-public/desktop-nixos-root" = {
        path = "/home/admin/.ssh/authorized_keys2";
        mode = "0600";
      };

      "ssh-keys-public/desktop-windows" = {
        path = "/home/admin/.ssh/authorized_keys3";
        mode = "0600";
      };

      "ssh-keys-public/macbook-macos" = {
        path = "/home/admin/.ssh/authorized_keys4";
        mode = "0600";
      };
    };
  };

  programs = {
    home-manager.enable = true;
    fish.enable = false;
    mangohud.enable = true;
    java.enable = true;

    btop.enable = true;

    zsh = {
      enable = true;
      enableCompletion = true;
      autosuggestion.enable = true;
      syntaxHighlighting.enable = true;

      shellAliases = shellAliases;

      oh-my-zsh = {
        enable = true;
        plugins = [ "git" ];
        theme = "fishy";
      };
    };

    git = {
      enable = true;
      userName = "mjallen18";
      userEmail = "matt.l.jallen@gmail.com";
      aliases = gitAliases;
    };
  };
}