30 lines
941 B
Nix
30 lines
941 B
Nix
{ config, lib, ... }:
|
|
let
|
|
inherit (config.flake.lib) flattenAttrs;
|
|
inherit (lib.attrsets) filterAttrs;
|
|
owner = flattenAttrs (filterAttrs (_: v: (v.primary or false)) config.flake.manifest.users);
|
|
in
|
|
{
|
|
flake.modules.nixos.default =
|
|
{ pkgs, ... }:
|
|
{
|
|
#TODO: move sudo/security options elsewhere
|
|
security.sudo.wheelNeedsPassword = false;
|
|
nix.settings.trusted-users = [ "@wheel" ];
|
|
#TODO: move to shell config
|
|
programs.${owner.shell}.enable = true;
|
|
#TODO: move ssh key settings elsewhere
|
|
users = {
|
|
mutableUsers = false;
|
|
groups.users.gid = 100;
|
|
users.root.openssh.authorizedKeys.keys = [ owner.pubkey ];
|
|
users.${owner.username} = {
|
|
isNormalUser = true;
|
|
# hashedPasswordFile
|
|
extraGroups = [ "wheel" ];
|
|
shell = pkgs.${owner.shell};
|
|
openssh.authorizedKeys.keys = [ owner.pubkey ];
|
|
};
|
|
};
|
|
};
|
|
}
|