infra/config/users.nix

{
  config,
  pkgs,
  ...
}: let
  keys = ["ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILm0O46zW/XfVOSwz0okRWYeOAg+wCVkCtCAoVTpZsOh"];
in {
  i18n.defaultLocale = "en_US.UTF-8";

  users.mutableUsers = false;
  users.users.root = {
    hashedPasswordFile = config.age.secrets."system/password-root".path;
    openssh.authorizedKeys.keys = keys;
    shell = pkgs.bash;
  };

  users.users.winston = {
    extraGroups = ["wheel"];
    hashedPasswordFile = config.age.secrets."system/password-winston".path;
    isNormalUser = true;
    openssh.authorizedKeys.keys = keys;
  };

  home-manager = {
    useGlobalPkgs = true;
    useUserPackages = true;
    users.winston = {
      home.stateVersion = "23.11";
      programs.fish = {
        enable = true;
        plugins = [
          {
            name = "plugin-git";
            src = pkgs.fishPlugins.plugin-git.src;
          }
        ];
      };
    };
  };
}