{config, ...}: { age.secrets.user-lukas.file = ../secrets/user-lukas.age; users = { mutableUsers = false; users = { root = { hashedPassword = "!"; openssh.authorizedKeys.keys = builtins.attrValues (import ../pubkeys.nix).hosts; }; lukas = { uid = 1000; isNormalUser = true; hashedPasswordFile = config.age.secrets.user-lukas.path; openssh.authorizedKeys.keys = builtins.attrValues (import ../pubkeys.nix).users; extraGroups = ["wheel"]; }; }; }; }