{ username, pkgs, ... }: { users.users.${username} = { isNormalUser = true; description = "${username}"; extraGroups = [ "wheel" ]; shell = pkgs.zsh; }; nix.settings.allowed-users = [ "@wheel" ]; }