infra/nix/os/profiles/common/user.nix

{ config
, pkgs
, ... }:

let 
  passwords = import ../../../variables/passwords.crypt.nix;
  libinfraos = import ../../lib/default.nix { };
  inherit (import ../../lib/default.nix { }) mkUser mkRoot;
in {
  users.mutableUsers = false;

  users.extraUsers.root = mkRoot { };
  users.extraUsers.steveej = mkUser {
    uid = 1000;
  };

  security.pam.enableU2F = true;
  security.pam.services.steveej.u2fAuth = true;
}