{
  pkgs,
  config,
  lib,
  inputs,
  ...
}: {
  # base system package install list
  environment.systemPackages = with pkgs; [
    wget
    curl
    rsync
    git
    vim
    lf
    age
    fzf
    btop
    neofetch
    usbutils
  ];

  # set timezone
  time.timeZone = "America/Chicago";

  # allow proprietary packages
  nixpkgs.config.allowUnfree = true;

  # enable flakes
  nix.settings.experimental-features = ["nix-command" "flakes"];

  # passwordless rebuild
  security.sudo.extraRules = [
    {
      users = ["blake"];
      commands = [
        {
          command = "/run/current-system/sw/bin/nixos-rebuild";
          options = ["NOPASSWD"];
        }
        {
          command = "/run/current-system/sw/bin/systemctl";
          options = ["NOPASSWD"];
        }
        {
          command = "/run/current-system/sw/bin/journalctl";
          options = ["NOPASSWD"];
        }
        {
          command = "/run/current-system/sw/bin/tailscale";
          options = ["NOPASSWD"];
        }
      ];
    }
  ];
}