{
  config,
  lib,
  pkgs,
  ...
}:
{
  sops.secrets = lib.mkIf config.my.secureHost {
    derek-password.neededForUsers = true;
  };
  services = {
    tailscale.enable = true;
    sunshine = {
      enable = true;
      autoStart = true;
      capSysAdmin = true;
      openFirewall = true;

    };
  };
  users.users.bearded_dragonn = {
    isNormalUser = true;
    createHome = true;
    hashedPasswordFile = config.sops.secrets.derek-password.path;
    packages = builtins.attrValues {
      inherit (pkgs)
        davinci-resolve
        shotcut
        pitivi
        bottles
        vscode
        nextcloud-client
        firefox
        warp
        ;
      inherit (pkgs.kdePackages)
        kdenlive
        ;
    };
    extraGroups = [
      "audio"
      "video"
      "input"
      "games"
    ];
  };
}