]> Git — Sourcephile - sourcephile-nix.git/blob - hosts/mermet/users.nix
gitolite: add on losurdo
[sourcephile-nix.git] / hosts / mermet / users.nix
1 { inputs, pkgs, lib, config, ... }:
2 let
3 inherit (builtins) readFile;
4 inherit (config.users) users;
5 in
6 {
7 imports = [
8 ../../members/julm.nix
9 ];
10
11 nix.trustedUsers = [
12 users."julm".name
13 ];
14
15 users = {
16 mutableUsers = false;
17 users = {
18 root = {
19 openssh.authorizedKeys.keys =
20 users."julm".openssh.authorizedKeys.keys ++
21 [ (readFile (inputs.secrets + "/hosts/losurdo/ssh/root.ssh-ed25519.pub")) ];
22 hashedPassword = "!";
23 };
24 };
25 groups = {
26 wheel.members = [
27 users."julm".name
28 ];
29 };
30 };
31
32 networking.nftables.ruleset = ''
33 add rule inet filter fw2net tcp dport {25,465} skuid ${users.julm.name} counter accept comment "SMTP"
34 add rule inet filter fw2net tcp dport 43 skuid ${users.julm.name} counter accept comment "Whois"
35 add rule inet filter fw2net tcp dport 563 skuid ${users.julm.name} counter accept comment "NNTPS"
36 add rule inet filter fw2net tcp dport 6697 skuid ${users.julm.name} counter accept comment "IRCS"
37 add rule inet filter fw2net tcp dport 11371 skuid ${users.julm.name} counter accept comment "HKP"
38 '';
39 }