# users.nix
{ config, pkgs, lib, ... }:

{
    # Define a user account. Don't forget to set a password with 'passwd'.
	security.sudo.extraRules = [{
		users = [ "fred" ];
		commands = [{ command = "ALL"; options = [ "NOPASSWD" ]; }];
	}];

	users.users.fred = {
		isNormalUser = true;
		description = "fred";
		extraGroups = [ "networkmanager" "wheel" "docker" "video" ];
		packages = lib.optionals
			(lib.elem config.networking.hostName [ "FredOS-Gaming" "FredOS-Macbook" ])
			(with pkgs; [ bazaar ]);
		openssh.authorizedKeys.keys = [
			"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEOgQQ9aO8Ri5oL2c3QntSk05PkryfLNsJQqIcjfKFqL fredrik@nordhammer.it" # FredOS-Gaming
			"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKwgOCdueMygza3LoBhs+fdIyKDnNXPz2AwZTXpah/jz fredrik@nordhammer.it" # FredOS-Macbook
			"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILTLAr9hSWW5PerZJmDZwmB5sa0DBTe2mM4IwTtcCfX3 fredrik@nordhammer.it" # iPhone (iSH) — carried over from old phone via backup restore
			"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID12fECfsFS+vOXUa9na4nhBtx9DVbGD12aRQ8a9Bh0Z fredrik@work-laptop" # Work laptop (Windows), replaced old work PC key 2026-07-28
		];
	};
}