49 lines
1.1 KiB
Nix
49 lines
1.1 KiB
Nix
{
|
|
pkgs,
|
|
config,
|
|
lib,
|
|
...
|
|
}: let
|
|
ifTheyExist = groups: builtins.filter (group: builtins.hasAttr group config.users.groups) groups;
|
|
in {
|
|
users.mutableUsers = false;
|
|
users.users.julian = {
|
|
description = "Julian";
|
|
group = "julian";
|
|
isNormalUser = true;
|
|
uid = 1000;
|
|
shell = pkgs.fish;
|
|
extraGroups = ifTheyExist [
|
|
"networkmanager"
|
|
"wheel"
|
|
"audio"
|
|
"network"
|
|
"video"
|
|
"podman"
|
|
"docker"
|
|
"git"
|
|
"gamemode"
|
|
"dialout"
|
|
];
|
|
|
|
openssh.authorizedKeys.keys = lib.splitString "\n" (
|
|
builtins.readFile ../../../../homes/julian/ssh.pub
|
|
);
|
|
# hashedPasswordFile = config.sops.secrets.julian-password.path;
|
|
hashedPassword = "$y$j9T$N33kLJQbV8soUoCbDkpwA1$r/yahJDgOPo4GGOrAi6BUG5zLTzmaBrA5NQ4nno561A";
|
|
packages = [pkgs.home-manager];
|
|
};
|
|
users.groups.julian = {
|
|
gid = 1000;
|
|
};
|
|
|
|
sops.secrets.julian-password = {
|
|
sopsFile = ../../secrets.yaml;
|
|
neededForUsers = true;
|
|
};
|
|
|
|
home-manager.users.julian = import ../../../../homes/julian/${config.networking.hostName}.nix;
|
|
|
|
security.pam.services.swaylock = {}; # Make swaylock unlocking work
|
|
}
|