{
  ...
}:
{
  # brew install --cask
  # these need to be updated manually
  homebrew.casks = [
    "drawio"
    "flameshot"
    "ghostty"
    "keepassxc"
    "spotify"
    "wireshark-chmodbpf"
  ];

  system.primaryUser = "lcech";

  system.activationScripts.postActivation.text = ''
    # activateSettings -u will reload the settings from the database and apply them to the current session,
    # so we do not need to logout and login again to make the changes take effect.
    defaults write -g 'com.apple.mouse.linear' 1
    sudo -u lcech /System/Library/PrivateFrameworks/SystemAdministration.framework/Resources/activateSettings -u
  '';

  system.defaults.dock.persistent-apps = [
    "/Applications/Cursor.app"
    "/Applications/Firefox.app"
    "/Applications/Ghostty.app"
    "/Applications/Microsoft Outlook.app"
    "/Applications/Slack.app"
    "/Applications/Spotify.app"
    "/Applications/Thunderbird.app"
    "/Applications/zoom.us.app"
    "/System/Applications/Notes.app"
  ];

  users.users.lcech.openssh.authorizedKeys.keys = [
    "${builtins.readFile ../.authorized-keys/dingleberry}"
  ];
}