{ config, pkgs, lib, system, host, user, allowed, secrets, ... }: 

{
  users.defaultUserShell = pkgs.bash; # if interactive, itll switch to fish

  users.users."${user}" = {
    isNormalUser = true;
    extraGroups = [ "networkmanager" "wheel" "audio" "video" "docker" "libvirtd" "uinput" ];
    useDefaultShell = true;
    openssh.authorizedKeys.keys = [
      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID1RPCcS8DtIf75a2FEW4d8X6WTVeLlmretoLqppvZlJ" # From [A] GPG Sub Key
    ];
    packages = with pkgs; []; # all in home.nix
  };
  users.users.tv = lib.mkIf (host == "NxACE") {
    isNormalUser = true;
    extraGroups = [ "networkmanager" "audio" "video" "uinput" ];
    useDefaultShell = true;
    packages = with pkgs; []; # all in home.nix
  };


  programs = {
    bash = {
      interactiveShellInit = ''
        if [[ $(${pkgs.procps}/bin/ps --no-header --pid=$PPID --format=comm) != "fish" && -z ''${BASH_EXECUTION_STRING} ]]
        then
          shopt -q login_shell && LOGIN_OPTION='--login' || LOGIN_OPTION=""
          exec ${pkgs.fish}/bin/fish $LOGIN_OPTION
        fi
      '';
    };
  };
}