{ outputs, config, ... }:
{
  imports = [
    outputs.modules.global.nix-config
    ./kanata.nix
    ./nix-builder.nix
    ./system.nix
    ./software.nix
  ]
  ++ (builtins.attrValues outputs.modules.darwin);

  # NOTE: this seems to be needed to make nix work in fish
  programs.fish = {
    enable = true;
    vendor = {
      completions.enable = true;
      config.enable = true;
      functions.enable = true;
    };
  };

  environment.shells = [
    config.programs.fish.package
  ];

  # TODO: move into module:
  # system.activationScripts.extraActivation.text = lib.mkAfter ''
  #   # disable spotlight
  #   echo "disable spotlight..." >&2
  #   mdutil -i off /
  # '';

  # TODO:
  #   - Proton Mail Bridge
  #   - Proton Drive set up home folders

  programs = {
    nix-index.enable = true;
    gnupg.agent.enable = true;
  };

  users.users.thomas.home = "/Users/thomas";
  users.users.thomas.shell = config.programs.fish.package;
  users.groups.nix-users.members = [ "thomas" ];
  ids.gids.nixbld = 350;
  nix.settings.trusted-users = [ "thomas" ];

  networking = {
    hostName = "meili";
    remote-login = true;
  };

  time.timeZone = "Europe/Vienna";
  system.stateVersion = 4;
}