{ pkgs, ... }:
{
  # idk why but without this, polkit does't work
  # letting sand think was a fucking mistake
  security.polkit.enable = true;
  systemd.user.services.niri-flake-polkit.enable = false;

  # stolen from https://nixos.wiki/wiki/Polkit on 2025-09-22T17
  systemd.user.services.polkit-gnome-authentication-agent-1 = {
    description = "polkit-gnome-authentication-agent-1";
    wantedBy = [ "graphical-session.target" ];
    wants = [ "graphical-session.target" ];
    after = [ "graphical-session.target" ];
    serviceConfig = {
      Type = "simple";
      ExecStart = "${pkgs.polkit_gnome}/libexec/polkit-gnome-authentication-agent-1";
      Restart = "on-failure";
      RestartSec = 1;
      TimeoutStopSec = 10;
    };
  };
}