{ config, lib, pkgs, modulesPath, ... }:
{
    users.users = {
        # connection only via hashed password;
        dev = {
            isNormalUser = true;
            home = "/home/dev";
            description = "User used to manually connect to this system (e.g. for maintenance)";
            extraGroups = [ "docker" "wheel" ];
            hashesPassword = "TODO";
        }
    };
}