hosts/losurdo/users.nix

   1 { inputs, pkgs, lib, config, hostName, ... }:
   2 let
   3   inherit (config.users) users;
   4 in
   5 {
   6 imports = [
   7   ../../members/julm.nix
   8 ];
   9
  10 nixpkgs.config.allowUnfree = true; # for hplip
  11 nix.settings.trusted-users = [
  12   users."julm".name
  13 ];
  14
  15 users = {
  16   mutableUsers = false;
  17   users = {
  18     root = {
  19       openssh.authorizedKeys.keys =
  20         users."julm".openssh.authorizedKeys.keys;
  21       hashedPassword = "!";
  22     };
  23     julm = {
  24       openssh.authorizedKeys.keys = [
  25       ];
  26     };
  27     sevy = {
  28       openssh.authorizedKeys.keys = [
  29         (lib.readFile ../../users/sevy/ssh/patate.pub)
  30         (lib.readFile ../../users/julm/ssh/carotte.pub)
  31       ];
  32       isNormalUser = true;
  33       uid = 1001;
  34     };
  35   };
  36   groups = {
  37     adbusers.members = [
  38       users."julm".name
  39     ];
  40     dialout.members = [
  41       users."julm".name
  42     ];
  43     tor.members = [
  44       users."julm".name
  45     ];
  46     wheel.members = [
  47       users."julm".name
  48     ];
  49     gpg-agent.members = [
  50       users."julm".name
  51     ];
  52   };
  53 };
  54
  55 networking.nftables.ruleset = ''
  56   table inet filter {
  57     chain output-net-julm {
  58       tcp dport {smtp, submissions} counter accept comment "SMTP"
  59       tcp dport nicname counter accept comment "Whois"
  60       tcp dport imaps counter accept comment "IMAPS"
  61       tcp dport ircs-u counter accept comment "IRCS"
  62       tcp dport 2222 counter accept comment "SSH(boot)"
  63       tcp dport xmpp-client counter accept comment "XMPP"
  64       tcp dport hkp counter accept comment "HKP"
  65       tcp dport {9009,9010,9011,9012,9013} counter accept comment "croc"
  66       udp dport 33434-33523 counter accept comment "traceroute"
  67       udp dport 60000-61000 counter accept comment "Mosh"
  68     }
  69     chain output-net {
  70       skuid ${users.julm.name} jump output-net-julm
  71     }
  72   }
  73 '';
  74 }