{ config, pkgs, ... }:

{
  users.defaultUserShell = pkgs.zsh;
  programs.zsh.enable = true;

  users.users.${config.my.username} = {
    isNormalUser = true;
    description = "Main Account";
    extraGroups = [
      "wheel"
      "networkmanager"
      "video"
      "audio"
      "gaming"
      "llm"
    ];
    openssh.authorizedKeys.keys = [
      # ssh-ed25519 AAAAA.... add my key here to enable ssh from another computer
    ];
  };

  services.openssh = {
    enable = true;
    settings = {
      PasswordAuthentication = false;
      PermitRootLogin = "no";
    };
  };
}