infra/config/users.nix

{
  config,
  pkgs,
  ...
}: {
  i18n.defaultLocale = "en_US.UTF-8";

  users.mutableUsers = false;
  users.users.root = {
    openssh.authorizedKeys.keys = [
      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILm0O46zW/XfVOSwz0okRWYeOAg+wCVkCtCAoVTpZsOh"
    ];
    passwordFile = config.age.secrets."system/password-root".path;
    shell = pkgs.bashInteractive;
  };
}