{
  pkgs,
  sec,
  ...
}:
{
  imports = [ ./secrets/system.nix ];

  services.openssh.settings.AllowUsers = [ "rus07tam" ];

  programs.fish.enable = true;

  users.users.rus07tam = {
    isNormalUser = true;
    description = "rus07tam";
    uid = 1000;
    extraGroups = [
      "networkmanager"
      "wheel"
    ];
    hashedPasswordFile = sec."rus07tam/hashedPassword".path;
    openssh.authorizedKeys = {
      keys = [
        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPRVeP7aRYdbIku7Qr6dLFLQrcq8LUUTTpYZZ3E8ZoQK ruject@rus07tam"
      ];
    };
    shell = pkgs.fish;
  };
}