{lib, ...}:
with lib; {
  users = {
    mutableUsers = false;

    users = {
      root.hashedPassword = "@HASHED_PASSWORD@";

      ${my.username} = {
        isNormalUser = true;
        uid = 1000;
        description = my.fullname;
        inherit (my) hashedPassword;
        openssh.authorizedKeys.keys = [my.ssh.key];
        extraGroups = ["wheel"];
      };
    };
  };
}