{ pkgs, outputs, config, lib, ... }: { satellite.pilot.name = lib.mkDefault "adrielus"; sops.secrets.pilot_password = { sopsFile = ../secrets.yaml; neededForUsers = true; }; users = { # Configure users through nix only mutableUsers = false; users.pilot = { inherit (config.satellite.pilot) name; # This gets referenced in other parts of the config uid = 1000; # Adds me to some default groups, and creates the home dir isNormalUser = true; # Picked up by our persistence module homeMode = "700"; # Add user to the following groups extraGroups = [ "wheel" # Access to sudo "lp" # Printers "audio" # Audio devices "video" # Webcam and the like "network" # wpa_supplicant "syncthing" # syncthing! ]; hashedPasswordFile = config.sops.secrets.pilot_password.path; shell = pkgs.fish; openssh.authorizedKeys.keyFiles = (import ./common.nix).authorizedKeys { inherit outputs lib; }; }; }; }