{ self, config, pkgs, lib, vars, nixosConfig ? config, ... }:
let
  inherit (config.swarselsystems) homeDir;
in
{
  options.swarselmodules.optional.work = lib.mkEnableOption "optional work settings";
  config = lib.mkIf config.swarselmodules.optional.work
    {
      home.packages = with pkgs; [
        stable.teams-for-linux
        shellcheck
        dig
        docker
        postman
        rclone
        stable24_05.awscli2
        libguestfs-with-appliance
        stable.prometheus.cli
        tigervnc
        openstackclient

        vscode
      ];

      systemd.user.sessionVariables = {
        DOCUMENT_DIR_WORK = lib.mkForce "${homeDir}/Documents/Work";
      };

      accounts.email.accounts.work =
        let
          inherit (nixosConfig.repo.secrets.local.work) mailAddress mailName;
        in
        {
          primary = false;
          address = mailAddress;
          userName = mailAddress;
          realName = mailName;
          passwordCommand = "pizauth show work";
          imap = {
            host = "outlook.office365.com";
            port = 993;
            tls.enable = true; # SSL/TLS
          };
          smtp = {
            host = "outlook.office365.com";
            port = 587;
            tls = {
              enable = true; # SSL/TLS
              useStartTls = true;
            };
          };
          thunderbird = {
            enable = true;
            profiles = [ "default" ];
            settings = id: {
              "mail.smtpserver.smtp_${id}.authMethod" = 10; # oauth
              "mail.server.server_${id}.authMethod" = 10; # oauth
              # "toolkit.telemetry.enabled" = false;
              # "toolkit.telemetry.rejected" = true;
              # "toolkit.telemetry.prompted" = 2;
            };
          };
          msmtp = {
            enable = true;
            extraConfig = {
              auth = "xoauth2";
              host = "outlook.office365.com";
              protocol = "smtp";
              port = "587";
              tls = "on";
              tls_starttls = "on";
              from = "${mailAddress}";
              user = "${mailAddress}";
              passwordeval = "pizauth show work";
            };
          };
          mu.enable = true;
          mbsync = {
            enable = true;
            expunge = "both";
            patterns = [ "INBOX" ];
            extraConfig = {
              account = {
                AuthMechs = "XOAUTH2";
              };
            };
          };
        };

      # wayland.windowManager.sway.config = {
      #   output = {
      #     "Applied Creative Technology Transmitter QUATTRO201811" = {
      #       bg = "${self}/files/wallpaper/navidrome.png ${config.stylix.imageScalingMode}";
      #     };
      #     "Hewlett Packard HP Z24i CN44250RDT" = {
      #       bg = "${self}/files/wallpaper/op6wp.png ${config.stylix.imageScalingMode}";
      #     };
      #     "HP Inc. HP 732pk CNC4080YL5" = {
      #       bg = "${self}/files/wallpaper/botanicswp.png ${config.stylix.imageScalingMode}";
      #     };
      #   };
      # };

      stylix = {
        targets.firefox.profileNames =
          let
            inherit (nixosConfig.repo.secrets.local.work) user1 user2 user3;
          in
          [
            "${user1}"
            "${user2}"
            "${user3}"
            "work"
          ];
      };

      programs =
        let
          inherit (nixosConfig.repo.secrets.local.work) user1 user1Long user2 user2Long user3 user3Long user4 path1 loc1 loc2 site1 site2 site3 site4 site5 site6 site7 lifecycle1 lifecycle2 domain1 domain2 gitMail;
        in
        {
          git.userEmail = lib.mkForce gitMail;

          zsh = {
            shellAliases = {
              dssh = "ssh -l ${user1Long}";
              cssh = "ssh -l ${user2Long}";
              wssh = "ssh -l ${user3Long}";
            };
            cdpath = [
              "~/Documents/Work"
            ];
            dirHashes = {
              d = "$HOME/.dotfiles";
              w = "$HOME/Documents/Work";
              s = "$HOME/.dotfiles/secrets";
              pr = "$HOME/Documents/Private";
              ac = path1;
            };

            sessionVariables = {
              VSPHERE_USER = "$(cat ${nixosConfig.sops.secrets.vcuser.path})";
              VSPHERE_PW = "$(cat ${nixosConfig.sops.secrets.vcpw.path})";
              GOVC_USERNAME = "$(cat ${nixosConfig.sops.secrets.govcuser.path})";
              GOVC_PASSWORD = "$(cat ${nixosConfig.sops.secrets.govcpw.path})";
              GOVC_URL = "$(cat ${nixosConfig.sops.secrets.govcurl.path})";
              GOVC_DATACENTER = "$(cat ${nixosConfig.sops.secrets.govcdc.path})";
              GOVC_DATASTORE = "$(cat ${nixosConfig.sops.secrets.govcds.path})";
              GOVC_HOST = "$(cat ${nixosConfig.sops.secrets.govchost.path})";
              GOVC_RESOURCE_POOL = "$(cat ${nixosConfig.sops.secrets.govcpool.path})";
              GOVC_NETWORK = "$(cat ${nixosConfig.sops.secrets.govcnetwork.path})";
            };
          };

          ssh = {
            matchBlocks = {
              "${loc1}" = {
                hostname = "${loc1}.${domain2}";
                user = user4;
              };
              "${loc1}.stg" = {
                hostname = "${loc1}.${lifecycle1}.${domain2}";
                user = user4;
              };
              "${loc1}.staging" = {
                hostname = "${loc1}.${lifecycle1}.${domain2}";
                user = user4;
              };
              "${loc1}.dev" = {
                hostname = "${loc1}.${lifecycle2}.${domain2}";
                user = user4;
              };
              "${loc2}" = {
                hostname = "${loc2}.${domain1}";
                user = user1Long;
              };
              "${loc2}.stg" = {
                hostname = "${loc2}.${lifecycle1}.${domain2}";
                user = user1Long;
              };
              "${loc2}.staging" = {
                hostname = "${loc2}.${lifecycle1}.${domain2}";
                user = user1Long;
              };
              "*.${domain1}" = {
                user = user1Long;
              };
            };
          };

          firefox = {
            profiles =
              let
                isDefault = false;
              in
              {
                "${user1}" = lib.recursiveUpdate
                  {
                    inherit isDefault;
                    id = 1;
                    settings = {
                      "browser.startup.homepage" = "${site1}|${site2}";
                    };
                  }
                  vars.firefox;
                "${user2}" = lib.recursiveUpdate
                  {
                    inherit isDefault;
                    id = 2;
                    settings = {
                      "browser.startup.homepage" = "${site3}";
                    };
                  }
                  vars.firefox;
                "${user3}" = lib.recursiveUpdate
                  {
                    inherit isDefault;
                    id = 3;
                  }
                  vars.firefox;
                work = lib.recursiveUpdate
                  {
                    inherit isDefault;
                    id = 4;
                    settings = {
                      "browser.startup.homepage" = "${site4}|${site5}|${site6}|${site7}";
                    };
                  }
                  vars.firefox;
              };
          };

          chromium = {
            enable = true;
            package = pkgs.chromium;

            extensions = [
              # 1password
              "gejiddohjgogedgjnonbofjigllpkmbf"
              # dark reader
              "eimadpbcbfnmbkopoojfekhnkhdbieeh"
              # ublock origin
              "cjpalhdlnbpafiamejdnhcphjbkeiagm"
              # i still dont care about cookies
              "edibdbjcniadpccecjdfdjjppcpchdlm"
              # browserpass
              "naepdomgkenhinolocfifgehidddafch"
            ];
          };
        };

      services = {
        kanshi = {
          settings = [
            {
              # seminary room
              output = {
                criteria = "Applied Creative Technology Transmitter QUATTRO201811";
                scale = 1.0;
                mode = "1280x720";
              };
            }
            {
              # work main screen
              output = {
                criteria = "HP Inc. HP 732pk CNC4080YL5";
                scale = 1.0;
                mode = "3840x2160";
              };
            }
            {
              # work side screen
              output = {
                criteria = "Hewlett Packard HP Z24i CN44250RDT";
                scale = 1.0;
                mode = "1920x1200";
                transform = "270";
              };
            }
            {
              profile = {
                name = "lidopen";
                exec = [
                  "${pkgs.swaybg}/bin/swaybg --output 'HP Inc. HP 732pk CNC4080YL5' --image ${self}/files/wallpaper/botanicswp.png --mode ${config.stylix.imageScalingMode}"
                  "${pkgs.swaybg}/bin/swaybg --output 'Hewlett Packard HP Z24i CN44250RDT' --image ${self}/files/wallpaper/op6wp.png --mode ${config.stylix.imageScalingMode}"
                ];
                outputs = [
                  {
                    criteria = config.swarselsystems.sharescreen;
                    status = "enable";
                    scale = 1.5;
                    position = "1462,0";
                  }
                  {
                    criteria = "HP Inc. HP 732pk CNC4080YL5";
                    scale = 1.4;
                    mode = "3840x2160";
                    position = "-1280,0";
                  }
                  {
                    criteria = "Hewlett Packard HP Z24i CN44250RDT";
                    scale = 1.0;
                    mode = "1920x1200";
                    transform = "90";
                    position = "-2480,0";
                  }
                ];
              };
            }
            {
              profile =
                let
                  monitor = "Applied Creative Technology Transmitter QUATTRO201811";
                in
                {
                  name = "lidopen";
                  exec = [
                    "${pkgs.swaybg}/bin/swaybg --output '${monitor}' --image ${self}/files/wallpaper/navidrome.png --mode ${config.stylix.imageScalingMode}"
                    "${pkgs.kanshare}/bin/kanshare ${config.swarselsystems.sharescreen} '${monitor}'"
                  ];
                  outputs = [
                    {
                      criteria = config.swarselsystems.sharescreen;
                      status = "enable";
                      scale = 1.7;
                      position = "2560,0";
                    }
                    {
                      criteria = "Applied Creative Technology Transmitter QUATTRO201811";
                      scale = 1.0;
                      mode = "1280x720";
                      position = "10000,10000";
                    }
                  ];
                };
            }
            {
              profile = {
                name = "lidclosed";
                exec = [
                  "${pkgs.swaybg}/bin/swaybg --output 'HP Inc. HP 732pk CNC4080YL5' --image ${self}/files/wallpaper/botanicswp.png --mode ${config.stylix.imageScalingMode}"
                  "${pkgs.swaybg}/bin/swaybg --output 'Hewlett Packard HP Z24i CN44250RDT' --image ${self}/files/wallpaper/op6wp.png --mode ${config.stylix.imageScalingMode}"
                ];
                outputs = [
                  {
                    criteria = config.swarselsystems.sharescreen;
                    status = "disable";
                  }
                  {
                    criteria = "HP Inc. HP 732pk CNC4080YL5";
                    scale = 1.4;
                    mode = "3840x2160";
                    position = "-1280,0";
                  }
                  {
                    criteria = "Hewlett Packard HP Z24i CN44250RDT";
                    scale = 1.0;
                    mode = "1920x1200";
                    transform = "270";
                    position = "-2480,0";
                  }
                ];
              };
            }
            {
              profile =
                let
                  monitor = "Applied Creative Technology Transmitter QUATTRO201811";
                in
                {
                  name = "lidclosed";
                  exec = [
                    "${pkgs.swaybg}/bin/swaybg --output '${monitor}' --image ${self}/files/wallpaper/navidrome.png --mode ${config.stylix.imageScalingMode}"
                  ];
                  outputs = [
                    {
                      criteria = config.swarselsystems.sharescreen;
                      status = "disable";
                    }
                    {
                      criteria = "Applied Creative Technology Transmitter QUATTRO201811";
                      scale = 1.0;
                      mode = "1280x720";
                      position = "10000,10000";
                    }
                  ];
                };
            }
          ];
        };
      };

      systemd.user.services.pizauth.Service = {
        ExecStartPost = [
          "${pkgs.toybox}/bin/sleep 1"
          "//bin/sh -c '${lib.getExe pkgs.pizauth} restore < ${homeDir}/.pizauth.state'"
        ];
      };

      swarselservices.pizauth = {
        enable = true;
        extraConfig = ''
          auth_notify_cmd = "if [[ \"$(notify-send -A \"Open $PIZAUTH_ACCOUNT\" -t 30000 'pizauth authorisation')\" == \"0\" ]]; then open \"$PIZAUTH_URL\"; fi";
          error_notify_cmd = "notify-send -t 90000 \"pizauth error for $PIZAUTH_ACCOUNT\" \"$PIZAUTH_MSG\"";
          token_event_cmd = "pizauth dump > ${homeDir}/.pizauth.state";
        '';
        accounts = {
          work = {
            authUri = "https://login.microsoftonline.com/common/oauth2/v2.0/authorize";
            tokenUri = "https://login.microsoftonline.com/common/oauth2/v2.0/token";
            clientId = "08162f7c-0fd2-4200-a84a-f25a4db0b584";
            clientSecret = "TxRBilcHdC6WGBee]fs?QR:SJ8nI[g82";
            scopes = [
              "https://outlook.office365.com/IMAP.AccessAsUser.All"
              "https://outlook.office365.com/SMTP.Send"
              "offline_access"
            ];
            loginHint = "${nixosConfig.repo.secrets.local.work.mailAddress}";
          };
        };

      };

      xdg =
        let
          inherit (nixosConfig.repo.secrets.local.work) user1 user2 user3;
        in
        {
          mimeApps = {
            defaultApplications = {
              "x-scheme-handler/msteams" = [ "teams-for-linux.desktop" ];
            };
          };
          desktopEntries =
            let
              terminal = false;
              categories = [ "Application" ];
              icon = "firefox";
            in
            {
              firefox_work = {
                name = "Firefox (work)";
                genericName = "Firefox work";
                exec = "firefox -p work";
                inherit terminal categories icon;
              };
              "firefox_${user1}" = {
                name = "Firefox (${user1})";
                genericName = "Firefox ${user1}";
                exec = "firefox -p ${user1}";
                inherit terminal categories icon;
              };

              "firefox_${user2}" = {
                name = "Firefox (${user2})";
                genericName = "Firefox ${user2}";
                exec = "firefox -p ${user2}";
                inherit terminal categories icon;
              };

              "firefox_${user3}" = {
                name = "Firefox (${user3})";
                genericName = "Firefox ${user3}";
                exec = "firefox -p ${user3}";
                inherit terminal categories icon;
              };


            };
        };
      swarselsystems = {
        startup = [
          # { command = "nextcloud --background"; }
          { command = "vesktop --start-minimized --enable-speech-dispatcher --ozone-platform-hint=auto --enable-features=WaylandWindowDecorations --enable-wayland-ime"; }
          { command = "element-desktop --hidden  --enable-features=UseOzonePlatform --ozone-platform=wayland --disable-gpu-driver-bug-workarounds"; }
          { command = "anki"; }
          { command = "obsidian"; }
          { command = "nm-applet"; }
          # { command = "feishin"; }
          { command = "teams-for-linux --disableGpu=true --minimized=true --trayIconEnabled=true"; }
          { command = "1password"; }
        ];
        monitors = {
          work_back_middle = rec {
            name = "LG Electronics LG Ultra HD 0x000305A6";
            mode = "2560x1440";
            scale = "1";
            position = "5120,0";
            workspace = "1:一";
            # output = "DP-10";
            output = name;
          };
          work_front_left = rec {
            name = "LG Electronics LG Ultra HD 0x0007AB45";
            mode = "3840x2160";
            scale = "1";
            position = "5120,0";
            workspace = "1:一";
            # output = "DP-7";
            output = name;
          };
          work_back_right = rec {
            name = "HP Inc. HP Z32 CN41212T55";
            mode = "3840x2160";
            scale = "1";
            position = "5120,0";
            workspace = "1:一";
            # output = "DP-3";
            output = name;
          };
          work_middle_middle_main = rec {
            name = "HP Inc. HP 732pk CNC4080YL5";
            mode = "3840x2160";
            scale = "1";
            position = "-1280,0";
            workspace = "11:M";
            # output = "DP-8";
            output = name;
          };
          work_middle_middle_side = rec {
            name = "Hewlett Packard HP Z24i CN44250RDT";
            mode = "1920x1200";
            transform = "270";
            scale = "1";
            position = "-2480,0";
            workspace = "12:S";
            # output = "DP-9";
            output = name;
          };
          work_seminary = rec {
            name = "Applied Creative Technology Transmitter QUATTRO201811";
            mode = "1280x720";
            scale = "1";
            position = "10000,10000"; # i.e. this screen is inaccessible by moving the mouse
            workspace = "14:T";
            # output = "DP-4";
            output = name;
          };
        };
        inputs = {
          "1133:45081:MX_Master_2S_Keyboard" = {
            xkb_layout = "us";
            xkb_variant = "altgr-intl";
          };
          # "2362:628:PIXA3854:00_093A:0274_Touchpad" = {
          #   dwt = "enabled";
          #   tap = "enabled";
          #   natural_scroll = "enabled";
          #   middle_emulation = "enabled";
          #   drag_lock = "disabled";
          # };
          "1133:50504:Logitech_USB_Receiver" = {
            xkb_layout = "us";
            xkb_variant = "altgr-intl";
          };
          "1133:45944:MX_KEYS_S" = {
            xkb_layout = "us";
            xkb_variant = "altgr-intl";
          };
        };

      };
    };

}