idk a bunch of things

got the merge working

groups/server/default.nix

@@ -1,8 +1,4 @@
-{
-  lib,
-  sshPort ? 22,
-  ...
-}: {
+{lib, ...}: {
   networking = {
     networkmanager.enable = true;
 
@@ -15,7 +11,7 @@
     firewall = {
       enable = lib.mkDefault true;
       allowedTCPPorts = [
-        sshPort
+        22
       ];
     };
   };
@@ -41,7 +37,7 @@
   services = {
     openssh = {
       enable = true;
-      ports = [sshPort];
+      ports = [22];
       settings = {
         PasswordAuthentication = false;
         PermitRootLogin = "no";
@@ -51,4 +47,20 @@
       };
     };
   };
+
+  users = {
+    users = {
+      # primary user
+      cry = {
+        isNormalUser = true;
+        home = "/home/cry";
+        extraGroups = ["wheel"];
+        openssh.authorizedKeys.keys = lib.mkOverride 900 [
+          (throw ''
+            Hosts in the `server` group must set `users.users.cry.openssh.authorizedKeys.keys = [ ... ]`.
+          '')
+        ];
+      };
+    };
+  };
 }