{
  adminUser,
  pkgs,
  ...
}:
{
  nix.settings.trusted-users = [ adminUser.name ];

  users.users.${adminUser.name} = {
    inherit (adminUser) uid;
    shell = pkgs.fish;
    isNormalUser = true;
    hashedPassword = "$y$j9T$TbnCB1V7n6W9C32LEroix1$P.OvRgLlhSbwFvR6ADE43Gc5Hc0ezxXMETS/DjIeXC8";
    openssh.authorizedKeys.keys = pkgs.lib.attrValues adminUser.userinfo.sshPublicKeys;
    extraGroups = [
      "wheel"
      "docker"
    ];
  };
}