{ pkgs, ... }: { services.scan-to-gpg = { enable = true; gpgkey = "${pkgs.clerie-keys}/gpg/clerie@clerie.de.asc"; }; users.users."clerie".extraGroups = [ "scan-to-gpg" ]; }