dc0b2518da
* flesh out impermanence * glances * hack * hacking in plex and tautulli * hack * hacking * Auto lint/format --------- Co-authored-by: Truxnell <9149206+truxnell@users.noreply.github.com> Co-authored-by: truxnell <truxnell@users.noreply.github.com>
41 lines
845 B
Nix
41 lines
845 B
Nix
{ pkgs
|
|
, config
|
|
, ...
|
|
}:
|
|
let
|
|
ifTheyExist = groups: builtins.filter (group: builtins.hasAttr group config.users.groups) groups;
|
|
in
|
|
{
|
|
|
|
sops.secrets = {
|
|
truxnell-password = {
|
|
sopsFile = ./secrets.sops.yaml;
|
|
neededForUsers = true;
|
|
};
|
|
};
|
|
|
|
users.users.truxnell = {
|
|
isNormalUser = true;
|
|
shell = pkgs.fish;
|
|
hashedPasswordFile = config.sops.secrets.truxnell-password.path;
|
|
extraGroups =
|
|
[
|
|
"wheel"
|
|
]
|
|
++ ifTheyExist [
|
|
"network"
|
|
"samba-users"
|
|
"docker"
|
|
"podman"
|
|
"audio" # pulseaudio
|
|
"libvirtd"
|
|
];
|
|
|
|
openssh.authorizedKeys.keys = [
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMZS9J1ydflZ4iJdJgO8+vnN8nNSlEwyn9tbWU9OcysW truxnell@home"
|
|
]; # TODO do i move to ingest github creds?
|
|
|
|
# packages = [ pkgs.home-manager ];
|
|
};
|
|
|
|
}
|