{ pkgs, ... }:
{
  # Workstation tools only; language runtimes and SDKs belong in projects.
  environment.systemPackages = with pkgs; [
    # Editors and shell utilities.
    emacs
    vscode
    git
    htop
    tmux
    ripgrep
    fd
    duf
    dust
    killall
    lsof
    rsync
    unzip
    zip

    # Infrastructure, containers, and structured data.
    ansible
    awscli2
    docker-compose
    jq
    yq-go

    # Networking and security tools.
    openssh
    gnupg
    openssl
    curl
    dig
    mosh
    tcpdump
    wget
    whois
    wireguard-tools
  ];

  virtualisation.docker.enable = true;
  users.users.clw.extraGroups = [ "docker" ];

  programs.direnv = {
    enable = true;
    nix-direnv.enable = true;
  };
}