{config, ...}: {
  sops.secrets.skyePwd.neededForUsers = true;

  roles.base = {
    username = "skye";
    isWheel = true;
    hashedPasswordFile = config.sops.secrets.skyePwd.path;
  };

  roles.git = {
    enable = true;
    enableLazygit = true;
    email = "jonni@liljamo.com";
    name = "Jonni Liljamo";
    gitExtraConfig = ''
      [sendemail]
          smtpserver = "smtp.migadu.com"
          smtpuser = "jonni@liljamo.com"
          smtpencryption = "ssl"
          smtpserverport = 465
    '';
  };

  roles.zellij.enable = true;
}