{ ... }: {
  # Required for homebrew on aarch64
  environment.systemPath = [ "/opt/homebrew/bin" "/opt/homebrew/sbin" ];

  homebrew = {
    enable = true;
    onActivation.autoUpdate = true;
    onActivation.upgrade = true;

    brews = [
      "go" # it's also installed by nix, but this is a fallback, just in case

      # various hashicorp related tools
      "hashicorp/tap/boundary" # https://www.boundaryproject.io/
      "hashicorp/tap/nomad-pack"

      # kubernetes stuff
      "kind" # to run local k8s cluster
      "kubebuilder"
    ];

    taps = [ "homebrew/cask-fonts" "hashicorp/tap" ];

    casks = [
      "1password-cli"
      "docker"
      "element"
      "emacs"
      "font-go"
      "font-source-code-pro"
      "font-source-sans-3"
      "font-source-serif-4"
      "font-cascadia-code"
      "font-cascadia-mono"
      "iterm2"
      "transmission"
      "vlc"
      "wireshark"
      "zoom"
    ];
  };
}