{ adminUser, pkgs, ... }:
{
  publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDLQTIPZraE+jpMqGkh8yUhNFzRJbMarX5Mky3nETw6c";

  age.secrets = {
    ssh-remote-builder.file = ../secrets/ssh-remote-builder.age;
    anthropic-api-key = {
      file = ../secrets/anthropic-api-key.age;
      owner = "${toString adminUser.uid}";
    };
    restic-password = {
      file = ../secrets/restic-pw.age;
      owner = "${toString adminUser.uid}";
    };
  };

  imports = [
    ../profiles/darwin.nix
    ../profiles/home-manager.nix
    ../profiles/remote-builder.nix
  ];

  # https://github.com/nix-darwin/nix-darwin/issues/1339
  ids.gids.nixbld = 30000;

  networking.hostName = "mba-m2";

  users.users.${adminUser.name} = {
    home = "/Users/${adminUser.name}";
    shell = pkgs.fish;
  };

  home-manager.users.${adminUser.name} = {
    home.stateVersion = "23.05";
    home.homeDirectory = "/Users/${adminUser.name}";
    imports = [
      ../home/profiles/darwin.nix
      ../home/profiles/development.nix
      ../home/programs/age.nix
      ../home/programs/mpv.nix
      ../home/programs/restic.nix
      ../home/programs/yt-dlp.nix
    ];
    home.packages = with pkgs; [
      element-desktop
      vlc-bin
    ];
    inherit (adminUser) userinfo;
  };
}