diff --git a/.git-crypt/keys/default/0/18970D7E1C7B078903733FA97D22B33E7D35A638.gpg b/.git-crypt/keys/default/0/18970D7E1C7B078903733FA97D22B33E7D35A638.gpg
new file mode 100644
index 0000000..62a1ad1
Binary files /dev/null and b/.git-crypt/keys/default/0/18970D7E1C7B078903733FA97D22B33E7D35A638.gpg differ
diff --git a/users/timokau.nix b/users/timokau.nix
new file mode 100644
index 0000000..d13902d
--- /dev/null
+++ b/users/timokau.nix
@@ -0,0 +1,23 @@
+{ config, pkgs, lib, ... }:
+
+let
+  userLib = import ./lib.nix { inherit lib; };
+  keys = [
+    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL0B85hC3DH2QDmhbaeAItRSdERs/3kKz+GEDPqDCXeE"
+    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEv6hnwYUT6oQvHmRK08IN8GnW9vywF/bpcDEq3jn9QP"
+  ];
+
+in
+{
+  users.users.timo = {
+    openssh.authorizedKeys.keys = keys;
+    useDefaultShell = true;
+    isNormalUser = true;
+    extraGroups = [
+      "wheel"
+    ];
+    uid = userLib.mkUid "timo";
+  };
+
+  nix.trustedUsers = [ "timo" ];
+}