{
  adminUser,
  pkgs,
  ...
}:
{
  nix.settings.trusted-users = [ adminUser.name ];

  users.users.${adminUser.name} = {
    inherit (adminUser) uid;
    shell = pkgs.fish;
    isNormalUser = true;
    hashedPassword = "$y$j9T$U3mXpCzXC1VUp8wV5snJz/$32vTk0KwVXvP/jLO13nMlGPHy0nCe4ZtebdvqU4hwmD";
    openssh.authorizedKeys.keys = pkgs.lib.attrValues adminUser.userinfo.sshPublicKeys;
    extraGroups = [
      "wheel"
      "docker"
    ];
  };
}