{ pkgs, lib, dotfiles, ... }:

let
  packageSets = with pkgs; rec {
    system = [
      gnutls
      gsasl
      libtool
      patchelf
      pcre
      pkg-config
    ];

    base = [
      act
      bat
      bitwarden-cli
      cloudflared
      delta
      exa
      ffmpeg
      fzf
      gh
      git-crypt
      gitui
      gnupg
      jq
      kubectl
      kubelogin-oidc
      mosh
      nixpkgs-fmt
      pandoc
      ripgrep
      sops
      texlive.combined.scheme-small
      vim
      wget
    ];

    languages = [
      crystal
      deno
      dotnet-sdk
      go
      jdk
      nil
      nodejs_20
      ruby_3_1
      sbcl
      shards
      zig
    ];

    programs = [
      jetbrains.idea-ultimate
      jetbrains.phpstorm
      jetbrains.rider
      rectangle
      slack
      tailscale
    ];

    multimedia = [
      ffmpeg
    ];

    everything = system ++ base ++ languages ++ programs ++ multimedia;
  };

  # We've got a small issue here. I tested this in a repl, and what I've
  # observed is that listFilesRecursive spits out [ /full/path/to/default.nix ],
  # while builtins.readDir spits out { "default.nix" = "regular"; }
  # In theory, this shouldn't be much of an issue, however, when using readDir
  # I would be able to do `map (n: "${./.}/${n}"), while when using
  # listFilesRecursive I have to use `map (n: "${n}").
  # The difference here is that when using listFilesRecursive, `n` becomes
  # `/nix/store/<ID>-default.nix`, meaning it can be used as-is, but when using
  # `readDir` it becomes `default.nix`, meaning the string used in the map
  # callback must be `"${./.}/${n}"` to get a path to the current derivation
  # where the nix file lives in.
  # Currently, I am unsure of the implications of having all files separately.
  # To do it "the right way" I'd obviously prefer the nix files to be children
  # of the alymac derivation, but it seems that if I want my map of imports to
  # be generated from the entire directory listing, it isn't going to work out.
  # The solution was slightly modified from this Reddit answer:
  # <https://www.reddit.com/r/NixOS/comments/j5pa9o/comment/g81dvop/>
  # So, let's get all files in the current directory...
  importMap = map
    (n: "${n}")
    (lib.filesystem.listFilesRecursive ./.);
  # importMap = map
  #   (n: "${./.}/${n}")
  #   (builtins.attrNames (builtins.readDir ./.));

  # And filter out default.nix
  importsFiltered =
    builtins.filter
      (x: !lib.strings.hasInfix "default" x)
      importMap;

in
{
  # Absolutely proprietary.
  nixpkgs.config.allowUnfree = true;

  # Make sure the nix daemon always runs
  services.nix-daemon.enable = true;

  # enable the gpg agent by default
  programs.gnupg.agent.enable = true;

  # if you use zsh (the default on new macOS installations),
  # you'll need to enable this so nix-darwin creates a zshrc sourcing needed environment changes
  programs.zsh.enable = true;

  # Make sure to set the correct values, or everything will break! (in reality,
  # it will just not build)
  users.users.alyxia = {
    name = "alyxia";
    home = "/Users/alyxia";
  };

  home-manager = {
    useGlobalPkgs = true;
    useUserPackages = true;
    extraSpecialArgs = { inherit dotfiles; };
    users.alyxia = { pkgs, ... }: {
      # Defined further above, a list of files to import.
      imports = importsFiltered;

      home = {
        packages = packageSets.everything;

        file.".npmrc".text = ''
          prefix = ''${HOME}/.npm-packages
        '';
      };

      # DO NOT CHANGE UNLESS YOU ARE ABSOLUTELY SURE ALL STATE AFFECTED BY THIS
      # OPTION IS APPROPRIATELY MIGRATED!!!
      home.stateVersion = "23.05"; # did you read the comment?
    };
  };

  homebrew = {
    enable = true;
    onActivation = {
      autoUpdate = true;
      cleanup = "zap";
      upgrade = true;
    };

    taps = [
      "drud/ddev"
      "homebrew/cask"
      "homebrew/cask-versions"
    ];

    # Please do not the brew.
    brews = [
      "composer"
      "croc"
      "ddev"
      "mkcert"
      "pinentry-mac"
      "pkg-config"
      "sdl2"
    ];

    casks = [
      "1password"
      "1password-cli"
      "alt-tab"
      "android-studio"
      "audacity"
      "background-music"
      "db-browser-for-sqlite"
      "discord"
      "discord-ptb"
      "docker"
      "firefox"
      "google-chrome"
      "itch"
      "iterm2"
      "obs"
      "raycast"
      "sequel-ace"
      "shottr"
      "spotify"
      "thunderbird"
      "visual-studio-code"
    ];
  };
}