{pkgs, ...}: {
  # Password set imperatively via `passwd`
  # so `mutableUsers = false` doesn't accidentally lock out SDDM/TTY
  users.mutableUsers = true;

  users.users.coyote = {
    isNormalUser = true;
    description = "coyote";
    extraGroups = ["wheel" "networkmanager" "lp" "scanner" "video" "render" "input" "audio" "kvm"];
    uid = 1000;
  };
  users.defaultUserShell = pkgs.fish;

  environment.sessionVariables = {
    NH_FLAKE = "/home/coyote/NixOS";
  };
}