{ config, pkgs, ... }:

let
  mainUser = config.users.extraUsers.mainUser;

in {
  users.extraUsers = {
    elster = {
      name = "elster";
      description = "user for running elster-online";
      home = "/home/elster";
      useDefaultShell = true;
      extraGroups = [];
      createHome = true;
    };
  };
  krebs.per-user.elster.packages = [
    pkgs.chromium
  ];
  security.sudo.extraConfig = ''
    ${mainUser.name} ALL=(elster) NOPASSWD: ALL
  '';
}