{ pkgs, config, lib, ... }: let
  cfg = config.grimmShared;
in {
  security.polkit.enable = true;

  config = with cfg; lib.mkIf (enable && tooling.enable) {
    environment.systemPackages = with pkgs; [
      (writeShellScriptBin "silent-add" "git add --intent-to-add $@ ; git update-index --assume-unchanged $@")
      (writeShellScriptBin "systemd-owner" "systemctl show -pUser,UID $@")
      (writeShellScriptBin "nix-referrers" "nix-store --query --referrers $@")
      mkpasswd
      gcc
      jdk17
      python3
      pkg-config
  
      pinentry
      pass
      libsecret
      tea
      acpi
      (writeShellScriptBin "passw" "pass $@")

      fbcat
      gomuks
      gotop
      ranger
      nix-search-cli

      wget
      tree
      file
      util-linux
      gnupg
      visualvm
      ffmpeg-full
      lm_sensors
      imagemagick
      pypy3
 
      hyfetch
      acpi
      lshw
      pciutils
      usbutils
      powertop
    ] ++ lib.optionals cfg.graphical [
      qdirstat
      lxqt.lxqt-policykit
      libva-utils
      glxinfo
      vulkan-tools
    ];

    programs.git = {
      enable = true;
      lfs.enable = true;
      config = {
        init.defaultBranch = "main";
        credential.username = cfg.tooling.git_user;
        core.editor = "${pkgs.neovim}/bin/nvim";
        user.name = cfg.tooling.git_user;
        user.email = cfg.tooling.git_email;
      };
    };
  
    programs.tmux = {
      enable = true;
      historyLimit = 42000;
      #keyMode = "vi";
    };
  
    virtualisation.docker.enable = true;
    
  
    programs.neovim = {
      enable = true;
      viAlias = true;
      defaultEditor = true;
      configure = {
      customRC = ''
        set number
        set hidden
        set fileencodings=utf-8
        set nocompatible
        set clipboard+=unnamedplus
        if filereadable($HOME . "/.vimrc")
          source ~/.vimrc
        endif
'';
        packages.myVimPackage = with pkgs.vimPlugins; {
          # loaded on launch
          start = [ 
            vim-nix
            vim-scala
            fugitive
          ];
  
          # manually loadable by calling `:packadd $plugin-name`
          opt = [ ];
        };
      };
    };

    services.passSecretService.enable = true;
    services.pcscd.enable = true;
    programs.xonsh.enable = true;
    programs.ssh.startAgent = true;
    programs.thefuck.enable = true;
    programs.gnupg.agent = {  
      settings = {
#        default-cache-ttl = 6000;
      };
      pinentryPackage = lib.mkDefault pkgs.pinentry;
      enable = true;
      # enableSSHSupport = true;
    };
  };
}