{ pkgs, ... }:

let
  keys = [
    "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD6vi3Y/e5wxJzsehFyM+N16f1QAmepMwIOSL3gO9w7CZ1jUF2Cky6y/40TcNWMDyvgxbcEfobG/Foa8DXQgKcc9LZS8jjGmzTVRCKxON5hQsYXRmxzawe8Fg2bkYxpWeoknW0wgDc/3XJA17IP2ONfVtX3YVQyhf5WPDHrXojnBadXMBUtvK5p7T+L9Z3/cGB80K5BoQCC4ZRn6gkOMjpFOKYXJfIzmLI5WPvTe7B/uuEfZ8IT8nzZsi2VBwru01s+iEXs7th/rAp2Q74pWTW8Q8jhNL1E15Yct9K7yV1p6D7YPF/BCKtXKP6VzU2ULmTp6nlCkeDJvZgLP6UpzLJJ basti@windnix"
  ];
in {

  nix.trustedUsers = [ "windsleep" ];

  programs = {
    zsh.enable = true;
    tmux.enable = true;
  };

  users.users.windsleep = {
    isNormalUser = true;
    description = "winzlieb";
    extraGroups = [ "users" "wheel" ];
    openssh.authorizedKeys = { inherit keys; };
    shell = pkgs.zsh;
  };

  users.users.root.openssh.authorizedKeys.keys = keys;
  nix.sshServe.keys = keys;
}