{ secret, ... }:
{
  users = {
    mutableUsers = false;

    users.root.hashedPassword = secret.passwordHashes.main or "";
    users.main = {
      isNormalUser = true;
      home = "/home/main";
      hashedPassword = secret.passwordHashes.main or "";
      description = "main";

      uid = 1000;

      extraGroups = ["wheel" "audio"];

      openssh.authorizedKeys.keys = ["ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFVkFvalffJ/SMjJGG3WPiqCqFygnWzhGUaeALBIoCsJ (none)"];
    };

    groups.main = {
      gid = 1000;
    };
  };
}