servers/mermet/users.nix

   1 { pkgs, lib, config, ... }:
   2 let
   3   inherit (builtins) readFile;
   4   inherit (builtins.extraBuiltins) pass-chomp;
   5   inherit (config.users) users;
   6 in
   7 {
   8 imports = [
   9   ../../members/julm.nix
  10 ];
  11
  12 nix.trustedUsers = [
  13   users."julm".name
  14 ];
  15
  16 users = {
  17   mutableUsers = false;
  18   users = {
  19     root = {
  20       openssh.authorizedKeys.keys = [
  21         (readFile ../../../sec/ssh/losurdo/root/ssh/id_ed25519.pub)
  22         ] ++
  23         users."julm".openssh.authorizedKeys.keys;
  24     };
  25     julm = {
  26       hashedPassword = pass-chomp "servers/mermet/login/julm/hashedPassword";
  27     };
  28   };
  29   groups = {
  30     wheel = {
  31       members = [
  32         users."julm".name
  33       ];
  34     };
  35   };
  36 };
  37 }