]> Git — Sourcephile - sourcephile-nix.git/blob - servers/mermet/users.nix
shorewall: remove configs on losurdo
[sourcephile-nix.git] / servers / mermet / users.nix
1 { pkgs, lib, config, ... }:
2 let
3 inherit (builtins) readFile;
4 inherit (builtins.extraBuiltins) pass-chomp;
5 inherit (config.users) users;
6 in
7 {
8 imports = [
9 ../../members/julm.nix
10 ];
11
12 nix.trustedUsers = [
13 users."julm".name
14 ];
15
16 users = {
17 mutableUsers = false;
18 users = {
19 root = {
20 openssh.authorizedKeys.keys = [
21 (readFile ../../../sec/ssh/losurdo/root/ssh/id_ed25519.pub)
22 ] ++
23 users."julm".openssh.authorizedKeys.keys;
24 };
25 julm = {
26 hashedPassword = pass-chomp "servers/mermet/login/julm/hashedPassword";
27 };
28 };
29 groups = {
30 wheel = {
31 members = [
32 users."julm".name
33 ];
34 };
35 };
36 };
37 }