{ config, lib, pkgs, ... }:

{
  users.extraUsers."_pass" = {
    uid = 401;
    isSystemUser = true;
    home = "/home/_pass";
    createHome = true;
    group = "_pass";
    shell = "${pkgs.git}/bin/git-shell";
    openssh.authorizedKeys.keyFiles = [ ./pass_id_ed25519.pub ];
  };

  users.extraGroups."_pass" = { gid = 401; };
}