{ pkgs, lib, ... }:

let
  pythonOverlay = final: prev: {
    python313 = prev.python313.override {
      packageOverrides = pyself: pysuper: {
        picosvg = pysuper.picosvg.overrideAttrs (_: {
          doCheck = false;
        });
      };
    };
    python313Packages = final.python313.pkgs;
  };
in
let
  crab = pkgs.callPackage ./pkgs/crab.nix { };
in
{
  nixpkgs.overlays = [ pythonOverlay ];

  nixpkgs.config.allowUnfreePredicate =
    pkg:
    builtins.elem (lib.getName pkg) [
      "1password"
      "1password-cli"
      "vault"

      "ngrok"
      "postman"
      "vscode"
      "code"

      "google-chrome"
      "slack"
      "spotify"
      "spotify-unwrapped"
    ];

  home.packages = with pkgs; [
    wget
    curl
    httpie
    hurl # TODO 2025-08-28 Compilation error: error: function pointer comparisons do not produce meaningful results since their addresses are not guaranteed to be unique
    bind
    gcc
    openssl.dev
    patchelf
    postman
    k6
    hey
    ngrok
    openssl
    crab

    pulseaudioFull
    pavucontrol
    bluez # was bluezFull before 27th september 2022

    sakura
    tmux
    zoxide
    ripgrep
    tree
    ncdu
    jq
    yq
    fx
    whois
    gnumake
    file
    bc
    ts
    tz
    mcfly
    fzf
    bat
    bat-extras.prettybat
    xsel
    trippy
    monolith # save a web page as a single file
    killport

    atool
    unzip
    zip

    _1password-cli
    _1password-gui
    yubico-pam
    yubikey-manager
    pam_u2f
    polkit_gnome # fun fact: https://gitlab.gnome.org/GNOME/gdm/-/issues/613
    libsecret # secret-tool : CLI pour le trousseau GNOME Keyring / Secret Service
    sshpass
    lftp
    vault

    # VPN LundiMatin — le daemon est activé dans nixos/configuration.nix (services.netbird)
    netbird

    arandr
    feh
    pcmanfm
    udiskie
    tldr

    git-filter-repo
    gh
    delta
    meld
    difftastic
    glab

    google-chrome
    thunderbird
    slack
    mattermost-desktop
    libreoffice
    ddcutil
    filezilla
    vokoscreen-ng
    ffmpeg
    ksnip
    gimp
    copyq
    wireshark
    gcalcli
    zed-editor
    kdePackages.kcachegrind

    spotify
    vlc

    jetbrains-mono
    vscode.fhs

    unclutter-xfixes
    playerctl
    numlockx

    nixfmt
    nodejs_22
    fnm
    bun
    docker
    docker-compose
    kubectl
    kubernetes-helm
    stern
    k9s
    krew

    php
    php84Packages.composer
    mariadb
    adminer
    python312
    python312Packages.pip
    python312Packages.uv
    mkcert
    nssTools # certutil for mkcert CA installation in browsers
    goaccess
    grafana-loki # logcli

    checkbashisms
    shellcheck
    shfmt
    toilet

    rtk

    # AI
    ollama
    whisper-cpp # STT local
    alsa-utils # arecord pour l'enregistrement
    xdotool # pour taper le texte transcrit
    libnotify # notifications
  ];
}