{ config, pkgs, ... }:

{
  services.nix-daemon.enable = true;
  users.users.shubh.home = "/Users/shubh";
  programs.zsh.enable = true;
  nixpkgs.config.allowUnfree = true;
  security.pki.certificateFiles = [ "${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt" "/etc/ssl/certs/zscaler.pem" ];

  homebrew = {
    enable = true;
    casks = [ "brave-browser" "karabiner-elements" ];
  };

  system.activationScripts.applications.text = pkgs.lib.mkForce (
    ''
      echo "setting up ~/Applications..." >&2
      rm -rf ~/Applications/Nix\ Apps
      mkdir -p ~/Applications/Nix\ Apps
      for app in $(find ${config.system.build.applications}/Applications -maxdepth 1 -type l); do
        src="$(/usr/bin/stat -f%Y "$app")"
        cp -r "$src" ~/Applications/Nix\ Apps
      done
    ''
  );
}