{
  config,
  inputs,
  lib,
  ...
}:
let
  users = lib.attrsets.filterAttrs (_: config: config.isNormalUser) config.users.users;
  sopsKeyPath = ".config/sops-nix/key.txt";
in
{
  home-manager.users = lib.attrsets.mapAttrs (user: config: {
    imports = [ inputs.sops-nix.homeManagerModules.sops ];

    sops.age.keyFile = "/persist${config.home}/${sopsKeyPath}";

    home = {
      persistence."/persist${config.home}".files = [ sopsKeyPath ];
      sessionVariables.SOPS_AGE_KEY_FILE = "${config.home}/${sopsKeyPath}";
    };
  }) users;
}