nixos-config/users/erwin/default.nix

{ pkgs, config, lib, ... }:
with lib;
let
  cfg = config.eboskma.users.erwin;
in
{
  options.eboskma.users.erwin = { enable = mkEnableOption "user account for Erwin"; };

  imports = [ ./desktop.nix ];

  config = mkIf (cfg.enable) {

    users.users.erwin = {
      isNormalUser = true;
      home = "/home/erwin";
      extraGroups = [ "wheel" "adm" "audio" "video" "dialout" ];
      shell = pkgs.fish;
      openssh.authorizedKeys.keyFiles = [
        (pkgs.fetchurl {
          url = "https://github.com/eboskma.keys";
          sha256 = "z/4lQnFuSkq8O0eunnkXIAH3x3ii9qVr9hxh4/8jBkc=";
        })
      ];
    };

    nix.settings.allowed-users = [ "erwin" ];
  };
}