{ config, pkgs, ... }:

{
  # Enable unfree globally
  nixpkgs.config.allowUnfree = true;

  environment.variables.BROWSER = "librewolf";
  environment.variables.SSH_AUTH_SOCK = "/home/user/.bitwarden-ssh-agent.sock";

  environment.systemPackages =
    with pkgs; [
      # Browsers and comms
      discord
      signal-desktop
      librewolf

      # Development tools
      go
      cargo
      gnumake
      rustc
      rust-analyzer
      rustfmt
      nodejs_24
      openssh
      nodePackages."pnpm"
      openssl
      killall
      ffmpeg
      zed-editor
      vscodium
      usbutils
      qmk-udev-rules
      qmk
      ghostty
      neofetch
      deepfilternet
      pavucontrol
      texliveFull

      # Desktop applications
      bitwarden-desktop
      vlc
      streamrip
      cider-2
      zotero
      prismlauncher
      lrcget
      impression
      streamcontroller
      onlyoffice-desktopeditors
    ];

  # Programs with extra configuration
  programs.steam = {
    enable = true;
    remotePlay.openFirewall = true;
    dedicatedServer.openFirewall = true;
    localNetworkGameTransfers.openFirewall = true;
  };

  programs.java.enable = true;
  programs.steam.extraPackages = [ pkgs.jdk ];

  programs.obs-studio.enable = true;

  programs.git = {
    enable = true;
    config = {
      user = {
        name = "User Name";
        email = "user@email.com";
        signingkey = "ssh-ed25519 ...";
      };
      gpg.format = "ssh";
      commit.gpgsign = true;
    };
  };
}