diff --git a/local/Brewfile b/local/Brewfile
new file mode 100644
index 0000000..8557de7
--- /dev/null
+++ b/local/Brewfile
@@ -0,0 +1,114 @@
+tap "kejadlen/tap", "https://git.kejadlen.dev/alpha/homebrew-tap.git"
+
+tap "homebrew/bundle"
+tap "homebrew/cask"
+tap "homebrew/command-not-found"
+tap "homebrew/core"
+tap "homebrew/services"
+
+brew "aider"
+brew "ansible"
+brew "bat"
+brew "chruby"
+brew "curl"
+brew "difftastic"
+brew "direnv"
+brew "docker"
+brew "dockutil"
+brew "entr"
+brew "eza"
+brew "fd"
+brew "fzf"
+brew "git"
+brew "git-lfs"
+brew "hyperfine"
+brew "jj"
+brew "luarocks"
+brew "mas"
+brew "minizinc"
+brew "pandoc"
+brew "restic"
+brew "ripgrep"
+brew "ruby-install"
+brew "syncthing", restart_service: :changed
+brew "terraform"
+brew "tmux"
+brew "ykman"
+brew "yt-dlp"
+brew "z.lua"
+brew "z3"
+brew "zoxide"
+brew "zsh"
+
+## editor things
+
+brew "efm-langserver"
+brew "fnlfmt"
+brew "shellcheck"
+brew "terraform-ls"
+brew "yaml-language-server"
+brew "yamlfmt"
+brew "yamllint"
+
+# install from head
+
+brew "neovim", args: ["HEAD"]
+brew "universal-ctags", args: ["HEAD"]
+
+# install from taps
+
+brew "fabianishere/personal/pam_reattach"
+brew "felixkratz/formulae/sketchybar"
+brew "kejadlen/tap/fennel-ls", args: ["HEAD"]
+
+cask "font-sauce-code-pro-nerd-font"
+cask "font-source-code-pro"
+cask "font-symbols-only-nerd-font"
+
+cask "1password"
+cask "1password-cli"
+cask "acorn"
+cask "aerospace"
+cask "affinity-designer@1"
+cask "alfred"
+cask "anki"
+cask "anytype"
+cask "arq"
+cask "autodesk-fusion"
+cask "calibre"
+cask "cleanshot"
+cask "daisydisk"
+cask "discord"
+cask "fantastical"
+cask "firefox@developer-edition"
+cask "ghostty"
+cask "hammerspoon"
+cask "keyboardcleantool"
+cask "kicad"
+cask "mailmate"
+cask "neovide"
+cask "obsidian"
+cask "orbstack"
+cask "prusaslicer"
+cask "qlmarkdown"
+cask "qlstephen"
+cask "quicklook-csv"
+cask "quicklook-json"
+cask "sf-symbols"
+cask "signal"
+cask "slack"
+cask "soulver"
+cask "tailscale"
+cask "telegram"
+cask "topnotch"
+cask "vlc"
+cask "yubico-yubikey-manager"
+cask "zoom"
+cask "zotero"
+
+mas "1Password for Safari", id: 1569813296
+mas "GoodNotes", id: 1444383602
+mas "Little Snitch Mini", id: 1629008763
+mas "PDF Viewer", id: 1120099014
+mas "Shareful", id: 1522267256
+mas "Xcode", id: 497799835
diff --git a/local/macos.yml b/local/macos.yml
index d2ba4a5..3f76ce2 100644
--- a/local/macos.yml
+++ b/local/macos.yml
@@ -1,10 +1,15 @@
-- import_playbook: homebrew.yml
+- name: Do macOS things
+  hosts: macos
+  tasks:
+    - name: Homebrew bundle
+      ansible.builtin.command: brew bundle --file ~/src/boxen/local/Brewfile
+
 - import_playbook: defaults.yml
 
 - name: Other macOS-specific things
   hosts: macos
   tasks:
-    - name: Symlink Jujutsu config
+    - name: Jujutsu things
       block:
         - name: Register Jujutsu config location
           ansible.builtin.command: jj config path --user