{
  config,
  username,
  ...
}:
{
  users = {
    users = {
      ${username} = {
        isNormalUser = true;
        createHome = true;
        hashedPasswordFile = config.sops.secrets."users_password/beastie".path;
        description = "Admin account";
        extraGroups = [
          "wheel"
        ];
        openssh.authorizedKeys.keys = [
          "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAKMJ3TkEmRQcX7RQijNa2km6a2xXJk6M6FERh7C9nTJ"
        ];
      };
      root = {
        password = null;
      };
    };
    mutableUsers = false;
  };
}