1 { inputs, pkgs, lib, config, wireguard, ... }:
3 inherit (builtins) readFile;
4 userLib = import ./lib.nix { inherit lib; };
8 openssh.authorizedKeys.keys = [
9 (readFile (inputs.secrets + "/members/ssh/julm.pub"))
10 (readFile (inputs.secrets + "/members/ssh/julm-mob.pub"))
11 (readFile (inputs.secrets + "/members/ssh/julm-mermet.pub"))
12 (readFile (inputs.secrets + "/members/ssh/julm-losurdo.pub"))
14 useDefaultShell = true;
17 #uid = userLib.mkUid "julm";
20 networking.wireguard.interfaces."wg-intra".peers = [
21 { allowedIPs = [ "192.168.42.3/32" ];
22 publicKey = "QV5rA6FU7PyTD7nvFI7H/X+zkjhjP5EzVHfODEpj+BM=";
23 persistentKeepalive = wireguard."wg-intra".persistentKeepalive;