{
  pkgs,
  config,
  lib,
  ...
}:
let
  cfg = config.py.users.default;
in
{
  options.py.users.default.enable = lib.mkEnableOption "Default PyroNet Users";
  options.py.user.name = lib.mkOption {
    type = lib.types.str;
    default = "thehedgehog";
    description = "User for deploy-rs deployments.";
  };

  config = lib.mkIf cfg.enable {
    users.users.pyrox = {
      description = "Pyrox";
      isNormalUser = true;
      extraGroups = [
        "adbusers"
        "wheel"
        "networkmanager"
        "video"
        "docker"
        "wireshark"
        "input"
      ];
      hashedPassword = "$y$j9T$Lwu/kwfIYVH6ApPNFv5TL.$xXtWoVxOKDW0xQtw7yf2JGWP3JI6r9WIqV19W0/zrg5";
      shell = pkgs.fish;
      openssh = {
        authorizedKeys = {
          keyFiles = [
            ./yubikey-new.pub
            ./yubikey-main.pub
            ./yubikey-back.pub
            ./backup.pub
          ];
          keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP532AB5mkNvE29MkDDY8HEf8ZdktGWiI0PzLrvbmLQe" ];
        };
      };
    };
    users.users.thehedgehog = {
      description = "The Hedgehog";
      isNormalUser = true;
      extraGroups = [
        "adbusers"
        "wheel"
        "networkmanager"
        "video"
        "docker"
        "wireshark"
        "input"
      ];
      hashedPassword = "$y$j9T$Lwu/kwfIYVH6ApPNFv5TL.$xXtWoVxOKDW0xQtw7yf2JGWP3JI6r9WIqV19W0/zrg5";
      shell = pkgs.fish;
      openssh = {
        authorizedKeys = {
          keyFiles = [
            ./yubikey-new.pub
            ./yubikey-main.pub
            ./yubikey-back.pub
            ./backup.pub
          ];
          keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP532AB5mkNvE29MkDDY8HEf8ZdktGWiI0PzLrvbmLQe" ];
        };
      };
    };
  };
}