{
  config,
  pkgs,
  lib,
  ...
}:
with lib;
{
  config = mkMerge [
    {
      home.packages = [
        # firewall analysis
        pkgs.nftables
        pkgs.nixos-firewall-tool

        # analyser
        pkgs.dnsutils
        pkgs.tcpdump
        pkgs.nmap
        pkgs.rustscan

        # helper
        pkgs.ipcalc
      ];

    }

    (mkIf config.gui.enable {
      home.packages = [
        pkgs.wireshark
      ];
    })
  ];
}