{ config
, pkgs
, ... }:

let
  passwords = import ../../../variables/passwords.crypt.nix;
  inherit (import ../../lib/default.nix { }) mkUser mkRoot;
in {
  users.mutableUsers = false;

  users.extraUsers.root = mkRoot { };
  users.extraUsers.steveej = mkUser {
    uid = 1000;
  };

  security.pam.u2f.enable = true;
  security.pam.services.steveej.u2fAuth = true;
}