{ pkgs, ... }: { users = { mutableUsers = false; defaultUserShell = pkgs.zsh; }; security.sudo.extraConfig = '' Defaults lecture = never ''; }