nix home-manager is really great at this (and declarative!)