modules/scanning.nix

{ username, ... }: {
  config = {
    hardware.sane.enable = true;
    users.users.${username}.extraGroups = [ "scanner" "lp" ];
  };
}