{ pkgs, config, ... }:
let
  ifTheyExist = groups: builtins.filter (group: builtins.hasAttr group config.users.groups) groups;
in
{
  users.users.nimbus = {

    isNormalUser = true;
    initialPassword = "changeme";
    extraGroups = [
      "fuse"
      "networkmanager"
      "scard"
      "wheel"
    ]
    ++ ifTheyExist [
      "docker"
      "git"
      "i2c"
      "kvm"
      "libvirt"
      "libvirtd"
      "photos"
      "scanner"
      "video"
      "wireshark"
    ];
    openssh.authorizedKeys.keyFiles = [
      (builtins.fetchurl {
        url = "https://meta.sr.ht/~sposito.keys";
        name = "sposito-srht-keys";
        sha256 = "1mf76x36kd1iaccy6l5f5xnbjqkm1fwf9giws9nb3bvgmj3c25wc";
      })
    ];

    packages = with pkgs; [
      git
      podman
      podman-compose
      nginx
    ];
  };

}