nixos-config/users/seb/user.nix

{ config, pkgs, ... }:
{
  sops.secrets.seb-password.neededForUsers = true;

  users.users.seb = {
    isNormalUser = true;
    description = "Sebastian Stork";
    hashedPasswordFile = config.sops.secrets.seb-password.path;
    shell = pkgs.zsh;
    extraGroups = [
      "wheel"
      "libvirtd"
    ];
  };
}