{
  sopsSecrets,
  config,
  lib,
  pkgs,
  ...
}:

{

  options.common.users.zaphyra.enable = lib.mkEnableOption "zaphyra user";

  config = lib.mkIf config.common.users.zaphyra.enable {
    environment.systemPackages = [ pkgs.ghostty.terminfo ];

    sops.secrets.zaphyraPassword = {
      neededForUsers = true;
      sopsFile = sopsSecrets.common;
    };

    users.users.zaphyra = {
      uid = 1001;
      description = "Katja";
      hashedPasswordFile = config.sops.secrets.zaphyraPassword.path;
      isNormalUser = true;
      extraGroups = [
        "ssh"
        "wheel"
      ];
      openssh.authorizedKeys.keys = [
        (builtins.readFile "${pkgs.zpha.website}/ssh_pubkey.asc")
      ];
    };
  };

}