{ inputs, ... }: { flake.nixosModules.users-sys-mo = { pkgs, config, ... }: { sops.secrets."users/mo/password" = { neededForUsers = true; }; sops.secrets."ssh/intern/public" = { owner = "mo"; path = "/home/mo/.ssh/authorized_keys"; mode = "0600"; }; systemd.tmpfiles.rules = [ "d /home/mo/.ssh 0700 mo users -" ]; users.mutableUsers = false; users.users.mo = { isNormalUser = true; description = "Mohamed Chrayed"; extraGroups = [ "networkmanager" "wheel" "video" "audio" ]; shell = pkgs.zsh; hashedPasswordFile = config.sops.secrets."users/mo/password".path; }; home-manager.users.mo = { home.username = "mo"; home.homeDirectory = "/home/mo"; home.stateVersion = "25.11"; }; }; }