members/julm.nix

   1 { inputs, pkgs, lib, config, wireguard, ... }:
   2 let
   3   inherit (builtins) readFile;
   4   inherit (config.users) users;
   5   userLib = import ./lib.nix { inherit lib; };
   6 in
   7 {
   8 users.users.julm = {
   9   openssh.authorizedKeys.keys = [
  10     (readFile (inputs.secrets + "/members/ssh/julm.pub"))
  11     (readFile (inputs.secrets + "/members/ssh/julm-mob.pub"))
  12     (readFile (inputs.secrets + "/members/ssh/julm-mermet.pub"))
  13     (readFile (inputs.secrets + "/members/ssh/julm-losurdo.pub"))
  14   ];
  15   useDefaultShell = true;
  16   isNormalUser = true;
  17   uid = 1000;
  18   #uid = userLib.mkUid "julm";
  19 };
  20 environment.systemPackages = [
  21   pkgs.neomutt # hack until neomutt becomes installable by home-manager again
  22 ];
  23 /*
  24 networking.wireguard.interfaces."wg-intra".peers = [
  25   { allowedIPs = [ "192.168.42.3/32" ];
  26     publicKey = "QV5rA6FU7PyTD7nvFI7H/X+zkjhjP5EzVHfODEpj+BM=";
  27     persistentKeepalive = wireguard."wg-intra".persistentKeepalive;
  28   }
  29 ];
  30 */
  31 home-manager.users.julm = {
  32   imports = [ (inputs.julm-nix + "/homes/julm.nix") ];
  33   host.name = config.networking.hostName;
  34 };
  35 systemd.services.home-manager-julm.postStart = ''
  36   ${pkgs.nix}/bin/nix-env --delete-generations +1 --profile /nix/var/nix/profiles/per-user/julm/home-manager
  37 '';
  38 }