hosts/carotte/users.nix

   1 { lib, config, ... }:
   2 let
   3   inherit (config.users) users;
   4 in
   5 {
   6   imports = [
   7     #../../users/julm.nix
   8   ];
   9
  10   nix.settings.trusted-users = [
  11     users."julm".name
  12   ];
  13
  14   users = {
  15     mutableUsers = false;
  16     users = {
  17       root = {
  18         openssh.authorizedKeys.keys =
  19           users."julm".openssh.authorizedKeys.keys;
  20         hashedPassword = "!";
  21       };
  22       julm = {
  23         openssh.authorizedKeys.keys = map lib.readFile [
  24           ../../users/julm/ssh/gnupg.pub
  25           ../../users/julm/ssh/oignon.pub
  26         ];
  27         useDefaultShell = true;
  28         isNormalUser = true;
  29         uid = 1000;
  30       };
  31     };
  32     groups = {
  33       /*
  34         adbusers.members = [ users."julm".name ];
  35         dialout.members = [ users."julm".name ];
  36         gpg-agent.members = [ users."julm".name ];
  37         tor.members = [ users."julm".name ];
  38       */
  39       wheel.members = [ users."julm".name ];
  40     };
  41   };
  42
  43 }