{
  config,
  lib,
  pkgs,
  modulesPath,
  ...
}:
{
  users.users = {
    # connection only via hashed password;
    dev = {
      isNormalUser = true;
      home = "/home/dev";
      description = "User used to manually connect to this system (e.g. for maintenance)";
      extraGroups = [
        "docker"
        "wheel"
      ];
      hashedPassword = "$y$j9T$BKWWfkRaZGvzmh5ezSSHV1$xy4v/WIDkWD9J3qTAB37Tys.6uEouRvmNqU42lWSRv7";
    };
  };
}