unexplrd/nixos-blueprint
2
2
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

sops

Browse Source
This commit is contained in:
unexplrd
2025-03-02 18:39:35 +02:00
parent f3c6a271dd
commit 0a710faa55
6 changed files with 102 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
hosts/dunamis/users.nix
View File

@ -1,10 +1,25 @@
{pkgs, ...}: {
{
inputs,
config,
pkgs,
...
}: let
sopSec = config.sops.secrets;
secrets = inputs.mysecrets;
in {
nix.settings.trusted-users = ["user"];
users.mutableUsers = false;
users.users = {
user = {
hashedPasswordFile = sopSec."user-password-hashed".path;
# passwordFile = config.sops.secrets.user-password.path;
isNormalUser = true;
extraGroups = ["wheel" "video" "libvirtd" "dialout"];
shell = pkgs.fish;
openssh.authorizedKeys.keyFiles = [
"${secrets}/ssh/id_ed25519_sarien_user.pub"
"${secrets}/ssh/id_ed25519_eldrid_user.pub"
];
};
# work = {
# isNormalUser = true;