{ lib, pkgs, ... }:
{
  users.users.caleb = {
    packages = with pkgs;
      [
        # apps
        firefox
        kate
        qalculate-qt
        keepassxc
        libsForQt5.krdc
        libreoffice-qt
        isoimagewriter
        qdirstat
        signal-desktop
        monero-gui
        tor-browser-bundle-bin
        yubikey-manager-qt
        libsForQt5.kdeconnect-kde
      ];
  };

  # kde connect
  networking.firewall = {
    enable = true;
    allowedTCPPortRanges = [
      { from = 1714; to = 1764; } # KDE Connect
    ];
    allowedUDPPortRanges = [
      { from = 1714; to = 1764; } # KDE Connect
    ];
  };

  # install Steam
  programs.steam = {
    enable = true;
    remotePlay.openFirewall = true;
    dedicatedServer.openFirewall = true;
  };

  # yubikey
  services.pcscd.enable = true;