When mentioning `/etc/login.defs` with regards to password aging defaults, we should also mention `/etc/default/useradd`
This is where you could set the following for example:
INACTIVE=21  # inactivity period
EXPIRE=2025-12-31  # Account expiration

This topic of system-wide password policy for new users deserves its own subheading.