{ config, pkgs, lib, ... }:

{
  imports = [ ../default.nix ];

  sops.secrets."password-hash/nyadmin" = {
    neededForUsers = true;
    sopsFile = ../../secrets/nyadmin/secrets.yaml;
  };

  users.users.nyadmin = {
    isNormalUser = true;
    shell = pkgs.zsh;
    home = "/home/nyadmin";
    description = "nyadministrator~";
    extraGroups = [ "wheel" "kvm" "libvirt" "docker" ];
    hashedPasswordFile = config.sops.secrets."password-hash/nyadmin".path;
    openssh.authorizedKeys.keys = [
      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOVgHcJ9C8TD515x+KqFKNYUa6IZML6LU3FWovmDIvyZ" ];
  };
}