{ config, lib, ... }:

let
  cfg = config.homelab.users.backup;
in {
  options.homelab.users.backup.enable = lib.mkEnableOption "user Backup";

  config = lib.mkIf cfg.enable {
    users.users.backup = {
      description = "Backup User";
      isNormalUser = true;
      extraGroups = [
        "docker" # Allow access to the docker socket.
      ];
      openssh.authorizedKeys.keyFiles = [
        config.sops.secrets.user_keys_backup.path
      ];
    };
  };
}