update

modules/system/meta.nix

@@ -0,0 +1,8 @@
+{lib,...}: with lib;{
+  options.xyno.meta = {
+    sopsKey = mkOption { type = types.text; };
+  };
+  config = {
+    sops.defaultSopsFile = ../../secrets/common.yaml;
+  };
+}

modules/system/user.nix

@@ -17,6 +17,7 @@ in
   config = lib.mkIf cfg.enable {
     environment.homeBinInPath = true;
     nix.settings.trusted-users = [cfg.name];
+    users.groups.plugdev = {};
     users.users.${cfg.name} = {
       openssh.authorizedKeys.keys = ["ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID/oMAi5jyQsNohfhcSH2ItisTpBGB0WtYTVxJYKKqhj"]; # theseus
       isNormalUser = true;