{ user, ... } : {
  imports =
    [
      ./hardware-configuration.nix
      ../../configuration
    ];

  #  sops.secrets."ssh/traveldroid/private" = { # ssh private key
  #    owner = "${user.username}";
  #    mode = "600";
  #    path = "/home/${user.username}/.ssh/id_ed25519";
  #  };
  #  sops.secrets."ssh/traveldroid/public" = { # ssh public key
  #    owner = "${user.username}";
  #    mode = "644";
  #    path = "/home/${user.username}/.ssh/id_ed25519.pub";
  #  };
  #  sops.secrets."ssh/wavefunk/private" = { # ssh private key
  #    owner = "${user.username}";
  #    mode = "600";
  #    path = "/home/${user.username}/.ssh/wavefunk";
  #  };
  #  sops.secrets."ssh/wavefunk/public" = { # ssh public key
  #    owner = "${user.username}";
  #    mode = "644";
  #    path = "/home/${user.username}/.ssh/wavefunk.pub";
  #  };
  #  sops.secrets."ssh/wavefunk_dev/private" = { # ssh private key
  #    owner = "${user.username}";
  #    mode = "600";
  #    path = "/home/${user.username}/.ssh/wavefunk_dev";
  #  };
  #  sops.secrets."ssh/wavefunk_dev/public" = { # ssh public key
  #    owner = "${user.username}";
  #    mode = "644";
  #    path = "/home/${user.username}/.ssh/wavefunk_dev.pub";
  #  };
  
    programs._1password.enable = true;
    programs._1password-gui = {
      enable = true;
      polkitPolicyOwners = [ "${user.username}" ];
    };
}