{ lib, pkgs, username, config, ... }:
{
  programs.zsh.enable = true;
  users.defaultUserShell = pkgs.zsh;

  users.users.${username} = {
    isNormalUser = true;
    extraGroups = [ "wheel" ];
    shell = pkgs.zsh;
  };

  users.users.${username}.initialPassword = lib.mkIf
    (!(config.sops.secrets ? "users/luochen570/passwordHash"))
    "Dly928730@..";

  users.users.${username}.openssh.authorizedKeys.keyFiles = lib.mkIf
    (config.sops.secrets ? "users/luochen570/authorized_key")
    [ config.sops.secrets."users/luochen570/authorized_key".path ];

  users.users.${username}.hashedPasswordFile = lib.mkIf
    (config.sops.secrets ? "users/luochen570/passwordHash")
    config.sops.secrets."users/luochen570/passwordHash".path;
}