refactor: revert username global var

systems/modules/programs/getty.nix

@@ -1,6 +1,5 @@
-{ username, ... }:
 {
   services.getty = {
-    autologinUser = "${username}";
+    autologinUser = "rafiq";
   };
 }

systems/modules/programs/hyprlock.nix

@@ -2,7 +2,6 @@
   inputs,
   hostname,
   pkgs,
-  username,
   ...
 }:
 let
@@ -18,7 +17,7 @@ let
 in
 {
   security.pam.services.hyprlock = { };
-  home-manager.users.${username} = {
+  home-manager.users.rafiq = {
     programs.hyprlock = {
       enable = true;
       package = inputs.hyprlock.packages.${pkgs.stdenv.hostPlatform.system}.hyprlock;

systems/modules/programs/tailscale.nix

@@ -0,0 +1,2 @@
+{
+}

systems/modules/security.nix

@@ -0,0 +1,9 @@
+{
+  sops = {
+    defaultSopsFile = ../../secrets/secrets.yaml;
+    age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
+    secrets.password.neededForUsers = true;
+  };
+
+  security.sudo.wheelNeedsPassword = false;
+}

systems/modules/security/sops.nix

@@ -0,0 +1,8 @@
+{ inputs, ... }:
+{
+  sops = {
+    defaultSopsFile = ../../../secrets/secrets.yaml;
+    age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
+    secrets.password.neededForUsers = true;
+  };
+}

systems/modules/stylix.nix

@@ -1,4 +1,4 @@
-{ inputs, username, ... }:
+{ inputs, ... }:
 let
   opacity = 0.8;
   toImport = [
@@ -25,12 +25,12 @@ in
   fonts.enableDefaultPackages = true;
 
   imports = [ inputs.stylix.nixosModules.stylix ] ++ toImport;
-  home-manager.users.${username}.imports = [ inputs.stylix.homeManagerModules.stylix ] ++ toImport;
+  home-manager.users.rafiq.imports = [ inputs.stylix.homeManagerModules.stylix ] ++ toImport;
 
   # Put options that only exist in the NixOS module here.
   stylix.homeManagerIntegration.autoImport = false;
   stylix.homeManagerIntegration.followSystem = false;
 
   # Put options that only exist in the home-manager module here.
-  # home-manager.users.${username}.stylix = {};
+  # home-manager.users.rafiq.stylix = {};
 }

systems/modules/users.nix

@@ -0,0 +1,16 @@
+{ config, ... }:
+{
+  home-manager.users.rafiq.imports = [ ../../users/rafiq.nix ];
+  users.users.rafiq = {
+    isNormalUser = true;
+    description = "rafiq";
+    hashedPasswordFile = config.sops.secrets.password.path;
+    extraGroups = [
+      "networkmanager"
+      "wheel"
+    ];
+    openssh.authorizedKeys.keys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILdsZyY3gu8IGB8MzMnLdh+ClDxQQ2RYG9rkeetIKq8n"
+    ];
+  };
+}

systems/modules/users/rafiq.nix

@@ -0,0 +1,16 @@
+{ inputs, config, ... }:
+{
+  home-manager.users.rafiq.imports = [ ../../../users/rafiq.nix ];
+  users.users.rafiq = {
+    isNormalUser = true;
+    description = "rafiq";
+    hashedPasswordFile = config.sops.secrets.password.path;
+    extraGroups = [
+      "networkmanager"
+      "wheel"
+    ];
+    openssh.authorizedKeys.keys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILdsZyY3gu8IGB8MzMnLdh+ClDxQQ2RYG9rkeetIKq8n"
+    ];
+  };
+}