nix flake update
softwareupdate --install-rosetta --agree-to-license
cp $(nix eval --raw nixpkgs#skhd)/Library/LaunchDaemons/org.nixos.skhd.plist ~/Library/LaunchAgents # and fix the PATH
Install DoH profile manually: https://github.com/paulmillr/encrypted-dns
curl -L https://nixos.org/nix/install | sh
nix run nix-darwin -- switch --flake .
nix flake update
darwin-rebuild switch --flake .