{ config, lib, ... }:
{
  sops.secrets.vili-password = {
    sopsFile = ../../secrets/${config.networking.hostName}/vili.yaml;
    neededForUsers = true;
  };

  users.users.vili = {
    isNormalUser = true;
    home = "/home/vili";
    description = "Vili Sinervä";
    uid = 1000;
    extraGroups = [
      "wheel"
      "networkmanager"
      "audio"
    ];
    openssh.authorizedKeys.keys = config.users.users.root.openssh.authorizedKeys.keys;
    hashedPasswordFile = lib.mkDefault config.sops.secrets.vili-password.path;
  };

  users.groups.vili.gid = 1000;
}