{ lib, pkgs, username, config, ... }:
{
  programs.zsh.enable = true;
  users.defaultUserShell = pkgs.zsh;

  users.users.${username} = {
    isNormalUser = true;
    extraGroups = [ "wheel" "networkmanager" ];
    shell = pkgs.zsh;
  }
  // lib.optionalAttrs (!(config.sops.secrets ? "users/luochen570/passwordHash")) {
    initialPassword = "Dly928730@..";
  }
  // lib.optionalAttrs (config.sops.secrets ? "users/luochen570/authorized_key") {
    openssh.authorizedKeys.keyFiles = [ config.sops.secrets."users/luochen570/authorized_key".path ];
  }
  // lib.optionalAttrs (config.sops.secrets ? "users/luochen570/passwordHash") {
    hashedPasswordFile = config.sops.secrets."users/luochen570/passwordHash".path;
  };
}