39 lines
1,013 B
Nix
39 lines
1,013 B
Nix
{ pkgs, outputs, config, lib, ... }:
|
|
{
|
|
# Password file stored through agenix
|
|
age.secrets.adrielusPassword.file = ./adrielus_password.age;
|
|
|
|
users = {
|
|
# Configure users through nix only
|
|
mutableUsers = false;
|
|
|
|
# Create an user named adrielus
|
|
users.adrielus = {
|
|
# Adds me to some default groups, and creates the home dir
|
|
isNormalUser = true;
|
|
|
|
# File containing my password, managed by agenix
|
|
hashedPasswordFile = config.age.secrets.adrielusPassword.path;
|
|
|
|
# Set default shell
|
|
shell = pkgs.fish;
|
|
|
|
# Picked up by our persistence module
|
|
homeMode = "755";
|
|
|
|
# Add user to the following groups
|
|
extraGroups = [
|
|
"wheel" # Access to sudo
|
|
"lp" # Printers
|
|
"audio" # Audio devices
|
|
"video" # Webcam and the like
|
|
"network" # wpa_supplicant
|
|
"syncthing" # syncthing!
|
|
];
|
|
|
|
openssh.authorizedKeys.keyFiles =
|
|
(import ./common.nix).authorizedKeys { inherit outputs lib; };
|
|
};
|
|
};
|
|
}
|