{ flake, ... }:
{
  # remote access
  users.users =
    let
      inherit (flake.config) me;
      myKeys = me.sshKeys;
    in
    {
      root.openssh.authorizedKeys.keys = myKeys;
      ${me.username}.openssh.authorizedKeys.keys = myKeys;
    };
}