{ ... }:
{
  # Required for homebrew on aarch64
  environment.systemPath = [ "/opt/homebrew/bin" "/opt/homebrew/sbin" ];

  homebrew = {
    enable = true;
    onActivation.autoUpdate = true;
    onActivation.upgrade = true;

    brews = [
      "aspell" # spelling
      "envoy" # to do some testing with envoy
      "go" # it's also installed by nix, but this is a fallback, just in case
      "hashicorp/tap/boundary" # https://www.boundaryproject.io/
      "kind" # to run local k8s cluster
      "kubebuilder"
      "s3cmd"
    ];

    taps = [
      "homebrew/cask-fonts"
      "hashicorp/tap"
    ];

    casks = [
      "1password-cli"
      "docker"
      "element"
      "emacs"
      "font-monaspace" # https://github.com/githubnext/monaspace
      "font-source-code-pro"
      "iterm2"
      "netnewswire"
      "transmission"
      "vlc"
      "wireshark"
      "zoom"
    ];
  };
}