nixos/modules/users/zem/default.nix

inputs:
{
  config =
    let
      inherit (inputs.lib) mkIf;
      inherit (inputs.config.nixos) users;
    in mkIf (builtins.elem "zem" users.users)
    {
      users.users.zem =
      {
        extraGroups = inputs.lib.intersectLists
          [ "groupshare" "video" ]
          (builtins.attrNames inputs.config.users.groups);
        hashedPasswordFile = inputs.config.sops.secrets."users/zem".path;
        openssh.authorizedKeys.keys = [ (builtins.readFile ./id_rsa.pub) ];
        shell = inputs.pkgs.zsh;
        autoSubUidGidRange = true;
      };
      home-manager.users.zem.imports = users.sharedModules;
      sops.secrets."users/zem".neededForUsers = true;
      nixos.services.groupshare.mountPoints = [ "/home/zem/groupshare" ];
    };
}