{ config, pkgs, ... }:

let
  settings = import ../settings.nix;
in
{
  users.users.${settings.username} = {
    isNormalUser = true;
    description = settings.userDescription;
    extraGroups = settings.userGroups;
    openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMuiXQV7+vtLxoyLojnW/Pkt6ScWQs29KPZe8aJVAvvC" ];
  };

  users.users.root.openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMuiXQV7+vtLxoyLojnW/Pkt6ScWQs29KPZe8aJVAvvC" ];

  security.sudo.execWheelOnly = true;
}