# users.nix
{ config, pkgs, lib, ... }:

{
    # Define a user account. Don't forget to set a password with 'passwd'.
	security.sudo.extraRules = [{
		users = [ "fred" ];
		commands = [{ command = "ALL"; options = [ "NOPASSWD" ]; }];
	}];

	users.users.fred = {
		isNormalUser = true;
		description = "fred";
		extraGroups = [ "networkmanager" "wheel" "docker" "video" ];
		packages = lib.optionals
			(lib.elem config.networking.hostName [ "FredOS-Gaming" "FredOS-Macbook" ])
			(with pkgs; [ bazaar ]);
		openssh.authorizedKeys.keys = [
			"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEOgQQ9aO8Ri5oL2c3QntSk05PkryfLNsJQqIcjfKFqL fredrik@nordhammer.it" # FredOS-Gaming
			"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKwgOCdueMygza3LoBhs+fdIyKDnNXPz2AwZTXpah/jz fredrik@nordhammer.it" # FredOS-Macbook
			# rotated 2026-07-28: old phone + work PC keys removed, replacements pending
		];
	};
}