{ pkgs, ... }:
{
  services.nix-daemon.enable = true;

  nix = {
    package = pkgs.nixFlakes;

    gc = {
      user = "root";
      automatic = true;
      interval.Day = 7;
      options = "--delete-older-than 30d";
    };

    settings = {
      trusted-users = [ "@admin" "fcuny" ];
      experimental-features = [ "nix-command" "flakes" ];
    };
  };

  # in order to install things like 1password's extensions
  nixpkgs.config.allowUnfree = true;

  # FIXME https://github.com/nix-community/nixd/issues/357
  nixpkgs.config.permittedInsecurePackages = [
    "nix-2.16.2"
  ];

  programs.zsh.enable = true;

  users.users.fcuny.home = "/Users/fcuny";

  # Touch ID for sudo auth
  security.pam.enableSudoTouchIdAuth = true;

  home-manager.users.fcuny = import ../../nix/profiles/home-manager/work.nix;
}