{ pkgs, ... }:

let
  settings = import ../settings.nix;
in
{
  users.groups.plugdev = { };

  users.users.${settings.username} = {
    isNormalUser = true;
    description = settings.userDescription;
    extraGroups = settings.userGroups;
    shell = pkgs.zsh;
  };

  # Security
  security.sudo.execWheelOnly = true;
  security.audit.enable = true;
  security.auditd.enable = true;

  # Udev
  services.udev.extraRules = ''
    SUBSYSTEM=="hidraw", ATTRS{idVendor}=="2dc8", ATTRS{idProduct}=="3109", MODE="0660", GROUP="plugdev", TAG+="uaccess"
  '';
}