{
  config,
  lib,
  pkgs,
  unstable,
  ...
}: let
  inherit (pkgs) stdenv;
in {
  environment.systemPackages = with pkgs; let
    common = [
      # essentials
      curl
      gcc
      gnumake
      gnupg
      imagemagick
      jq
      unzip
      viddy
      wget
      xclip
      xdg-utils
      zip

      # modern cli
      bat
      eza
      fd
      unstable.github-cli
      progress
      glab
      hadolint
      nodePackages.eslint
      oha
      pre-commit
      ripgrep
      yq-go
      shellcheck
      shfmt
      starship
      tldr
      tmux-sessionizer

      # containers
      krew
      kubecolor
      kubectl
      kubectx
      minikube
      stern
      unstable.helm-docs
      unstable.k9s
      unstable.skaffold

      # cloud
      unstable.google-cloud-sdk
      unstable.awscli2

      # LSP
      nodePackages.bash-language-server
      nodePackages.pyright
      nodePackages.yaml-language-server
      sumneko-lua-language-server

      # monitoring
      ctop
      glances
      grafana-loki
      htop
      procs

      # lua
      lua53Packages.luacheck
      stylua

      # golang
      gofumpt
      golangci-lint
      gopls

      # rust
      rustup

      # js
      nodejs
      nodePackages.prettier
      nodePackages.yarn

      # networking
      arp-scan
      dnsutils
      iperf
      nmap
      openssl
      openvpn
      sshfs # mac requires https://osxfuse.github.io/
      vpngate

      # rice
      neofetch
      pfetch

      # infra
      terraform-ls
      terraformer
      tflint

      # nix
      alejandra
      cachix
      nix-diff
      nix-tree
      nixfmt
      nixpkgs-fmt
      nixpkgs-review
      rnix-lsp

      # python
      poetry
      python310
      python310Packages.black
      python310Packages.ipython
      python310Packages.pip
      python310Packages.poetry-core
      python310Packages.setuptools
      python310Packages.virtualenv

      # media
      youtube-dl

      # blog
      hugo
    ];
  in
    common;

  programs.gnupg.agent.enable = true;
}