{
  config,
  lib,
  pkgs,
  ...
}: {
  config = lib.mkIf config.ar.users.aly.enable {
    age.secrets = {
      alyraffaufFastmail = {
        file = ../../../secrets/mail/alyraffauf_fastmail.age;
        owner = "aly";
      };
    };

    home-manager.users.aly =
      if config.ar.users.aly.manageHome
      then import ../../../homes/aly
      else {};

    users.users.aly = {
      description = "Aly Raffauf";
      extraGroups = ["networkmanager" "wheel" "docker" "libvirtd" "video"];
      hashedPassword = config.ar.users.aly.password;
      isNormalUser = true;
      linger = true;
      uid = 1000;

      openssh.authorizedKeys.keys = [
        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG0HAmaMTAvrFrinB+b83c8hq6PyjmxRHg1IxR2GH6RN u0_a344@localhost" # termux on wallace
        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGcJBb7+ZxkDdk06A0csNsbgT9kARUN185M8k3Lq7E/d u0_a336@localhost" # termux on winona
        (builtins.readFile ../../../secrets/publicKeys/aly_lavaridge.pub)
        (builtins.readFile ../../../secrets/publicKeys/aly_mauville.pub)
        (builtins.readFile ../../../secrets/publicKeys/aly_petalburg.pub)
        (builtins.readFile ../../../secrets/publicKeys/aly_rustboro.pub)
      ];
    };
  };
}