{ config, lib, ... }:

let
  cfg = config.homelab.users.backup;
in {
  options.homelab.users.backup.enable = lib.mkEnableOption "user Backup";

  config = lib.mkIf cfg.enable {
    users.users.backup = {
      description = "Backup User";
      isNormalUser = true;
      extraGroups = [
        "docker" # Allow access to the docker socket.
      ];
      openssh.authorizedKeys.keys = [
        # Hugo
        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICms6vjhE9kOlqV5GBPGInwUHAfCSVHLI2Gtzee0VXPh"
      ];
    };
  };
}