mermet: enable miniflux

[sourcephile-nix.git] / hosts / losurdo / users.nix

diff --git a/hosts/losurdo/users.nix b/hosts/losurdo/users.nix
index bb1153956a83bc057e0c59c7613a83bdc75b252d..174661d01dce8df659d24c24cb7d3aa47a639ee6 100644 (file)
--- a/hosts/losurdo/users.nix
+++ b/hosts/losurdo/users.nix
@@ -1,4 +1,4 @@
-{ inputs, pkgs, lib, config, ... }:
+{ inputs, pkgs, lib, config, hostName, ... }:
 let
   inherit (config.security) gnupg;
   inherit (config.users) users;
@@ -8,7 +8,8 @@ imports = [
   ../../members/julm.nix
 ];
 
-nix.trustedUsers = [
+nixpkgs.config.allowUnfree = true; # for hplip
+nix.settings.trusted-users = [
   users."julm".name
 ];
 
@@ -24,6 +25,18 @@ users = {
       openssh.authorizedKeys.keys =
         users."root".openssh.authorizedKeys.keys;
     };
+    julm = {
+      openssh.authorizedKeys.keys = [
+      ];
+    };
+    sevy = {
+      openssh.authorizedKeys.keys = [
+        (lib.readFile (inputs.secrets + "/members/ssh/sevy-patate.pub"))
+        (lib.readFile (inputs.secrets + "/members/ssh/julm-carotte.pub"))
+      ];
+      isNormalUser = true;
+      uid = 1001;
+    };
   };
   groups = {
     adbusers.members = [
@@ -44,9 +57,9 @@ users = {
   };
 };
 
-security.gnupg.secrets."/root/.ssh/id_ed25519" = {
-  gpg = "${gnupg.store}/ssh/root.ssh-ed25519.gpg";
-};
+#security.gnupg.secrets."/root/.ssh/id_ed25519" = {
+#  gpg = "${gnupg.store}/ssh/root.ssh-ed25519.gpg";
+#};
 
 networking.nftables.ruleset = lib.concatMapStringsSep "\n"
   (rule: "add rule inet filter fw2net meta skuid ${users.julm.name} " + rule) [
@@ -54,10 +67,12 @@ networking.nftables.ruleset = lib.concatMapStringsSep "\n"
   ''tcp dport 43 counter accept comment "Whois"''
   ''tcp dport 993 counter accept comment "IMAPS"''
   ''tcp dport 6697 counter accept comment "IRCS"''
+  ''tcp dport 2222 counter accept comment "SSH(boot)"''
   ''tcp dport 5222 counter accept comment "XMPP"''
   ''tcp dport 11371 counter accept comment "HKP"''
   ''tcp dport {9009,9010,9011,9012,9013} counter accept comment "croc"''
   ''udp dport 33434-33523 counter accept comment "traceroute"''
+  ''udp dport 60000-61000 counter accept comment "Mosh"''
   #''ip protocol tcp counter accept comment "all"''
 ];
 }