{ pkgs, lib, ... }:
{
  user.xdg.config.files."rbw/config.json" = {
    generator = lib.generators.toJSON { };
    value = {
      email = "boss@atagen.co";
      pinentry = lib.getExe pkgs.pinentry-gtk2; # TODO this is fugly
      base_url = "https://vault.lobotomise.me";
    };
  };

  # nixpkgs.config.permittedInsecurePackages = [
  #   "electron-36.9.5"
  # ];
  apps = with pkgs; {
    passwordManager = bitwarden-desktop;
    passwordCli = rbw;
  };
}