25 lines
517 B
Nix
25 lines
517 B
Nix
{
|
|
pkgs,
|
|
secrets,
|
|
...
|
|
}: let
|
|
user = secrets.users;
|
|
in {
|
|
users.mutableUsers = false;
|
|
users.users = {
|
|
root = {
|
|
inherit (user.root) hashedPassword;
|
|
};
|
|
"${user.primary.userName}" = {
|
|
uid = 1000;
|
|
inherit (user.primary) hashedPassword;
|
|
description = user.primary.realName;
|
|
isNormalUser = true;
|
|
extraGroups = ["docker" "libvirtd" "tss" "wheel"];
|
|
shell = pkgs.zsh;
|
|
openssh.authorizedKeys.keys = [
|
|
user.primary.sshPublicKey
|
|
];
|
|
};
|
|
};
|
|
}
|