hosts/mermet/users.nix

   1 { inputs, pkgs, lib, config, ... }:
   2 let
   3   inherit (builtins) readFile;
   4   inherit (config.users) users;
   5 in
   6 {
   7 imports = [
   8   ../../members/julm.nix
   9 ];
  10
  11 nix.trustedUsers = [
  12   users."julm".name
  13 ];
  14
  15 users = {
  16   mutableUsers = false;
  17   users = {
  18     root = {
  19       openssh.authorizedKeys.keys =
  20         users."julm".openssh.authorizedKeys.keys ++
  21         [ (readFile (inputs.secrets + "/hosts/losurdo/ssh/root.ssh-ed25519.pub")) ];
  22       hashedPassword = "!";
  23     };
  24   };
  25   groups = {
  26     wheel.members = [
  27       users."julm".name
  28     ];
  29   };
  30 };
  31 services.sanoid.datasets."rpool/home/julm/mail" = {
  32   use_template = [ "local" ];
  33   hourly = 12;
  34   daily = 7;
  35 };
  36 services.sanoid.datasets."rpool/home/julm/log" = {
  37   use_template = [ "local" ];
  38   hourly = 12;
  39   daily = 7;
  40   monthly = 1;
  41 };
  42 services.sanoid.datasets."rpool/backup/losurdo/home/julm/work" = {
  43   use_template = [ "remote" ];
  44   daily = 31;
  45 };
  46 networking.nftables.ruleset = ''
  47   add rule inet filter fw2net tcp dport {25,465} skuid ${users.julm.name} counter accept comment "SMTP"
  48   add rule inet filter fw2net tcp dport 43 skuid ${users.julm.name} counter accept comment "Whois"
  49   add rule inet filter fw2net tcp dport 563 skuid ${users.julm.name} counter accept comment "NNTPS"
  50   add rule inet filter fw2net tcp dport 6697 skuid ${users.julm.name} counter accept comment "IRCS"
  51   add rule inet filter fw2net tcp dport 11371 skuid ${users.julm.name} counter accept comment "HKP"
  52 '';
  53 }