infra/config/users.nix

{
  config,
  pkgs,
  ...
}: {
  i18n.defaultLocale = "en_US.UTF-8";

  users.mutableUsers = false;
  users.users.root = {
    openssh.authorizedKeys.keys = ["ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILm0O46zW/XfVOSwz0okRWYeOAg+wCVkCtCAoVTpZsOh"];
    hashedPasswordFile = config.age.secrets."system/password-root".path;
    shell = pkgs.fish;
  };
}