_:
{
  users.users.user = {
    isNormalUser = true;
    extraGroups = [ "wheel" "docker" "network" "plugdev" ];
  
    openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHVA7tSTR9Mn5jXEJSezGvSz42btvOsS5zKaQZMmhHdi" ];
  };
  security = {
    doas = {
      enable = true;
      extraConfig = "permit nopass keepenv :wheel";
    };
  };
}