{ pkgs, ... }:
{
  nixpkgs.config.allowUnfree = true;

  environment = {
    systemPackages = with pkgs; [
      vim
      wget
      curl
      htop
      tmux
      libimobiledevice
      ripgrep
      fd
      (pkgs.buildGoModule {
        name = "meilindex";
        src = pkgs.fetchFromGitHub {
          owner = "tryffel";
          repo = "meilindex";
          rev = "v0.2.0";
          sha256 = "sha256-Lecni3cqkWOQjSjjJZLyWKz2eFR5MS8gNPVXRTwrciA=";
        };
        vendorHash = "sha256-eBIfyffQK5gYYPBuAvpZKnjRbpmY3GKS47QoMtbetS8=";
      })
    ];

    pathsToLink = [ "/share/zsh" ];
  };

  services = {
    tailscale = {
      enable = true;
      useRoutingFeatures = "client";
    };

    ollama = {
      enable = true;
      acceleration = "rocm";
      environmentVariables = {
        HSA_OVERRIDE_GFX_VERSION = "11.0.3";
      };
    };
    meilisearch.enable = true;
  };

  programs = {
    zsh.enable = true;
    _1password-gui = {
      enable = true;
      polkitPolicyOwners = [ "moco" ];
    };
    _1password.enable = true;
  };
}