rrvsh/pantheon
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(users): use forAllUsers' in nixos module

Browse source
This commit is contained in:
Mohammad Rafiq 2025-07-07 08:51:38 +08:00
parent 07413c4ac0
commit a3ed4c608d
No known key found for this signature in database
1 changed files with 17 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

32
nix/modules/users.nix
View file

@ -1,35 +1,37 @@
{ config, lib, ... }:
let
cfg = config.flake;
inherit (config.flake.lib) forAllUsers' flattenAttrs;
inherit (lib.attrsets) filterAttrs;
owner = flattenAttrs (filterAttrs (_: v: (v.primary or false)) cfg.manifest.users);
inherit (cfg.lib) forAllUsers';
inherit (lib.lists) optional;
in
{
flake.modules.nixos.default =
{ pkgs, config, ... }:
{
#TODO: move sudo/security options elsewhere
security.sudo.wheelNeedsPassword = false;
nix.settings.trusted-users = [ "@wheel" ];
# security.sudo.wheelNeedsPassword = false;
# nix.settings.trusted-users = [ "@wheel" ];
#TODO: move to shell config
programs.${owner.shell}.enable = true;
# programs.${owner.shell}.enable = true;
#TODO: move ssh key settings elsewhere
# users.users.root.openssh.authorizedKeys.keys = [ owner.pubkey ];
users = {
mutableUsers = false;
groups.users.gid = 100;
users.root.openssh.authorizedKeys.keys = [ owner.pubkey ];
users.${owner.username} = {
isNormalUser = true;
# hashedPasswordFile
extraGroups = [ "wheel" ];
shell = pkgs.${owner.shell};
openssh.authorizedKeys.keys = [ owner.pubkey ];
};
users = forAllUsers' (
_: value: {
isNormalUser = true;
extraGroups = optional (value.primary or false) "wheel";
# FIXME: remove when we make the shell module
ignoreShellProgramCheck = true;
shell = pkgs.${value.shell};
openssh.authorizedKeys.keys = [ value.pubkey ];
}
);
};
home-manager.users = forAllUsers' (
name: _: {
#TODO: move into nixos/darwin config - should not apply to homeConfigurations
home.username = name;
home.homeDirectory = config.users.users.${name}.home;
}