{ config
, ...
}:

{
  users = {
    mutableUsers = false;

    users = {
      root = {
        # Disables password based authentication
        hashedPassword = "!";
      };

      admin = {
        isNormalUser = true;
        extraGroups = [ "wheel" ];

        hashedPasswordFile = config.sops.secrets."users/admin/password_hash".path;

        openssh.authorizedKeys.keys = [
          "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMZa7mIXvsHouMb3I9gq2uQjNZKsMV43bpWc7yX/RH/X finnliry@gmail.com"
        ];
      };

      kurisu = {
        isNormalUser = true;
        extraGroups = [ "wheel" ];

        hashedPasswordFile = config.sops.secrets."users/kurisu/password_hash".path;

        openssh.authorizedKeys.keys = [
          "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMZa7mIXvsHouMb3I9gq2uQjNZKsMV43bpWc7yX/RH/X finnliry@gmail.com"
        ];
      };
    };
  };
}