Move common host features to features-nixos folder

2026-03-23 20:57:12 +01:00
parent b31791b9ef
commit eec600d1d0
37 changed files with 49 additions and 45 deletions
@@ -0,0 +1,51 @@
+{
+  self,
+  pkgs,
+  config,
+  lib,
+  ...
+}: let
+  ifTheyExist = groups: builtins.filter (group: builtins.hasAttr group config.users.groups) groups;
+in {
+  users.mutableUsers = false;
+  users.users.julian = {
+    description = "Julian";
+    group = "julian";
+    isNormalUser = true;
+    uid = 1000;
+    shell = pkgs.fish;
+    extraGroups = ifTheyExist [
+      "networkmanager"
+      "wheel"
+      "audio"
+      "realtime"
+      "rtkit"
+      "network"
+      "video"
+      "podman"
+      "docker"
+      "git"
+      "gamemode"
+      "dialout"
+    ];
+
+    openssh.authorizedKeys.keys = lib.splitString "\n" (
+      builtins.readFile ./ssh.pub
+    );
+    # hashedPasswordFile = config.sops.secrets.julian-password.path;
+    hashedPassword = "$y$j9T$N33kLJQbV8soUoCbDkpwA1$r/yahJDgOPo4GGOrAi6BUG5zLTzmaBrA5NQ4nno561A";
+    packages = [pkgs.home-manager];
+  };
+  users.groups.julian = {
+    gid = 1000;
+  };
+
+  sops.secrets.julian-password = {
+    sopsFile = ../../secrets.yaml;
+    neededForUsers = true;
+  };
+
+  home-manager.users.julian = import "${self}/homes/julian/${config.networking.hostName}.nix";
+
+  security.pam.services.swaylock = {}; # Make swaylock unlocking work
+}