{ ... }:
{
  users.users.myuser = {
    isNormalUser = true;
    extraGroups = [
      "wheel"   # needed for sudo without password
      "docker"  # needed for docker without sudo
    ];
    openssh.authorizedKeys.keyFiles = [
      "/root/.ssh/authorized_keys" # should already have your public SSH key inside
    ];
  };
}