{
  config,
  pkgs,
  lib,
  ...
}:

let
  cfg = config.nmasur.profiles.work;
in

{

  options.nmasur.profiles.work.enable = lib.mkEnableOption "work config";

  config = lib.mkIf cfg.enable {

    allowUnfreePackages = [
      "vault-bin"
      # "teams"
    ];

    home.packages = [
      pkgs.actionlint # Lint for GitHub Actions Workflows
      pkgs.claude-code # AI LLM Agent
      pkgs.stable.visidata # CSV inspector
      pkgs.dos2unix # Convert Windows text files
      pkgs.inetutils # Includes telnet
      pkgs.gnupg # Encryption
      pkgs.awscli2
      pkgs.ssm-session-manager-plugin
      pkgs.awslogs
      pkgs.stu # TUI for AWS S3
      pkgs.pre-commit
      pkgs.google-cloud-sdk
      pkgs.vault-bin
      pkgs.ipcalc # Make IP network calculations
      pkgs.cloudflared # Allow connecting to Cloudflare tunnels
      pkgs.monitorcontrol # Allows adjusting external displays
      pkgs.nmasur.ocr # Converts images to text
      pkgs.nmasur.aws-ec2 # Browse EC2 instances
      pkgs.nmasur.terraform-init # Quick shortcut for initializing Terraform backend
      pkgs.uv # Python packaging
    ];

    home.file.".Brewfile".text = /* homebrew */ ''
      cask "1password" # 1Password will not launch from Nix on macOS
      # cask "gitify" # Git notifications in menu bar (downgrade manually from 4.6.1)
      # cask "logitech-g-hub" # Mouse and keyboard management
      cask "logitune" # Logitech webcam firmware
      cask "meetingbar" # Show meetings in menu bar
    '';

    programs.fish.shellAliases.ec2 = "aws-ec2";

    nmasur.presets = {
      fonts.enable = lib.mkDefault true;
      programs = {
        _1password.enable = lib.mkDefault true;
        atuin.enable = lib.mkDefault true;
        aws-ssh.enable = lib.mkDefault true;
        bash.enable = lib.mkDefault true;
        bat.enable = lib.mkDefault true;
        cargo.enable = lib.mkDefault true;
        direnv.enable = lib.mkDefault true;
        dotfiles.enable = lib.mkDefault true;
        fd.enable = lib.mkDefault true;
        firefox.enable = lib.mkDefault true;
        fish.enable = lib.mkDefault true;
        fzf.enable = lib.mkDefault true;
        ghostty.enable = lib.mkDefault true;
        git-work.enable = lib.mkDefault true;
        git.enable = lib.mkDefault true;
        github.enable = lib.mkDefault true;
        jujutsu.enable = lib.mkDefault true;
        k9s.enable = lib.mkDefault true;
        kubectl.enable = lib.mkDefault true;
        ldapsearch.enable = lib.mkDefault true;
        obsidian.enable = lib.mkDefault true;
        ripgrep.enable = lib.mkDefault true;
        starship.enable = lib.mkDefault true;
        terraform.enable = lib.mkDefault true;
        thunderbird.enable = lib.mkDefault true;
        weather.enable = lib.mkDefault true;
      };
      services = {
        mbsync.enable = lib.mkDefault true;
      };
    };

  };

}