{
  pkgs,
  lib,
  config,
  ...
}: let
  cfg = config.users.custom.marie;
in {
  options.users.custom.marie = with lib; {
    enable = mkEnableOption "Enable user 'marie' on this machine";
  };

  config = lib.mkIf cfg.enable {
    users.users.marie = {
      isNormalUser = true;
      extraGroups = [
        "wheel"
        "networkmanager"
        "video"
        "lp"
        "scanner"
        config.users.groups.keys.name
      ];
      hashedPassword = "$6$Fo/q41zf1/tI4dgX$.Y1bnBkGjwkRCOM2gg1yZtAjFQadjAVX8Eq8Llw5Y12ENOycBWtNaCVPli2P7gwNpLSg3p80iG.Zy.T1GR0NG0";
      # This is really just for my comfort
      shell = pkgs.fish;
    };

    programs.fish.enable = true;
    home-manager.users.marie.imports = [../users/marie/default.nix];

    sops.secrets = let
      sopsFile = ../secrets/users/marie/secrets.yaml;
      owner = "marie";
      mode = "0400";
    in {
      restic-backup-marie = {
        inherit sopsFile owner mode;
        key = "restic-backup";
      };
    };
  };
}