{
  systemConfiguration = { config, ... }: {
    isNormalUser = true;
    # TODO: Don't hard-code `persist`.  Use
    # config.sydnix.impermanence.persistGroupName.
    extraGroups = [ "wheel" "persist" ];
    initialHashedPassword =
      "$y$j9T$aEFDDwdTZbAc6VQRXrkBJ0$K8wxTGTWDihyX1wxJ.ZMH//wmQFfrGGUkLkxIU0Lyq8";

    openssh.authorizedKeys.keyFiles = [
      ../../public-keys/crumb-at-guix-rebound.pub
    ];
  };

  homeConfiguration = { config, lib, pkgs, ... }: {
    imports = [
      ./programs.nix
      ./files.nix
    ];

    sydnix = {
      sops = {
        enable = true;
        keyFile = "/persist/vault/${config.home.username}/keys/melbourne";
      };
    };

    # Don't touch!
    home.stateVersion = "18.09";
  };
}