{config, ...}: {
  sops.secrets.rootPwd.neededForUsers = true;
  sops.secrets.skyePwd.neededForUsers = true;

  roles.base = {
    root = {
      hashedPasswordFile = config.sops.secrets.rootPwd.path;
    };
    primaryUser = {
      username = "skye";
      isWheel = true;
      hashedPasswordFile = config.sops.secrets.skyePwd.path;
      extraGroups = ["video"];
    };
  };

  roles.tailscale = {
    enable = true;
    enableSSH = true;
  };

  roles.audio.enable = true;
  roles.bluetooth = {
    enable = true;
    enableHDAudio = true;
  };

  roles.git = {
    enable = true;
    enableLazygit = true;
    email = "jonni@liljamo.com";
    name = "Jonni Liljamo";
    gitExtraConfig = ''
      [sendemail]
          smtpserver = "smtp.migadu.com"
          smtpuser = "jonni@liljamo.com"
          smtpencryption = "ssl"
          smtpserverport = 465
    '';
  };

  roles.shell.enable = true;
  roles.zellij.enable = true;
  roles.kitty.enable = true;

  roles.docker.enable = true;

  roles.graphics = {
    enable = true;
    amd.enable = true;
  };
  roles.hyprland.enable = true;

  roles.gaming = {
    enable = true;
    steam.enable = true;
  };

  roles.qutebrowser.enable = true;
}