nixos-conf/shared/users/vili.nix

{ config, lib, ... }:
{
  sops.secrets =
    lib.mkIf
      (builtins.elem config.networking.hostName [
        "helium"
        "lithium"
      ])
      {
        vili-password = {
          sopsFile = ../../secrets/${config.networking.hostName}/vili.yaml;
          neededForUsers = true;
        };
      };

  users.users.vili = {
    isNormalUser = true;
    home = "/home/vili";
    description = "Vili Sinervä";
    uid = 1000;
    extraGroups = [
      "wheel"
      "networkmanager"
      "audio"
    ];
    openssh.authorizedKeys.keys = config.users.users.root.openssh.authorizedKeys.keys;
    hashedPasswordFile =
      if builtins.hasAttr "vili-password" config.sops.secrets then
        config.sops.secrets.vili-password.path
      else
        null;
  };

  users.groups.vili.gid = 1000;
}