{ ... }:
{
  system.defaults = {
    dock = {
      autohide = true;
      dashboard-in-overlay = false;
      launchanim = false; # Don't animate opening applications.
      mru-spaces = false; # don’t rearrange spaces based on the most recent use
      orientation = "left";
      show-recents = false;
      showhidden = false;
      tilesize = 60; # Default is 64.
      wvous-br-corner = 1; # Disable Notes hot corner.
    };
    finder.AppleShowAllExtensions = true;

    CustomUserPreferences = {
      "com.apple.desktopservices" = {
        # Avoid creating .DS_Store files on network or USB volumes
        DSDontWriteNetworkStores = true;
        DSDontWriteUSBStores = true;
      };
    };

    # Requires the directory to already exist.
    # See system.activationScripts.postUserActivation
    screencapture.location = "~/Documents/screenshots";
    SoftwareUpdate.AutomaticallyInstallMacOSUpdates = true;
  };

  system.keyboard = {
    enableKeyMapping = true;
    remapCapsLockToControl = true;
  };

  # TODO:  - The `system.activationScripts.postUserActivation` option has
  #     been removed, as all activation now takes place as `root`. Please
  #     restructure your custom activation scripts appropriately,
  #     potentially using `sudo` if you need to run commands as a user.
  # system.activationScripts.postUserActivation.text = ''
  #   mkdir -p ~/Documents/screenshots
  # '';

  # Touch ID for sudo auth
  security.pam.services.sudo_local.touchIdAuth = true;
}