{ config, pkgs, keys, ... }:

{
  age.secrets.password = {
    file = ../secrets/password.age;
  };

  users.mutableUsers = false;
  users.users.mel = {
    isNormalUser = true;
    description = "Mel";
    shell = pkgs.fish;
    extraGroups = [ "networkmanager" "wheel" "docker" ];

    hashedPasswordFile = config.age.secrets.password.path;
    openssh.authorizedKeys.keys = keys.allUsers;

    packages = (with pkgs; []);
  };
}