configuration.nix/common/users/default.nix

{ pkgs
, secrets
, ...
}:
let
  user = secrets.users;
in
{
  users.mutableUsers = false;
  users.users = {
    root = {
      inherit (user.root) hashedPassword;
    };
    "${user.primary.userName}" = {
      uid = 1000;
      inherit (user.primary) hashedPassword;
      description = user.primary.realName;
      isNormalUser = true;
      extraGroups = [ "docker" "libvirtd" "networkmanager" "tss" "wheel" ];
      shell = pkgs.zsh;
      openssh.authorizedKeys.keys = [
        user.primary.sshPublicKey
        secrets.phone.sshPublicKey
      ];
    };
  };
}