unexplrd/nixos-blueprint
2
2
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

do the same for two other hosts

Browse Source 
Signed-off-by: unexplrd <unexplrd@linerds.us>
This commit is contained in:
unexplrd
2025-03-28 18:22:51 +02:00
parent b7f95a14c3
commit 2745bd1e35
20 changed files with 297 additions and 286 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
hosts/dunamis/users.nix
View File

@ -5,7 +5,6 @@
...
}: let
sopSec = config.sops.secrets;
secrets = inputs.mysecrets;
in {
nix.settings.trusted-users = [
"user"
@ -15,12 +14,12 @@ in {
users.users = {
user = {
hashedPasswordFile = sopSec."user-password-hashed".path;
isNormalUser = true;
extraGroups = ["wheel" "video" "libvirtd" "dialout"];
isNormalUser = true;
shell = pkgs.fish;
openssh.authorizedKeys.keyFiles = [
"${secrets}/ssh/id_ed25519_sarien_user.pub"
"${secrets}/ssh/id_ed25519_eldrid_user.pub"
openssh.authorizedKeys.keyFiles = map (f: "${inputs.mysecrets}/ssh/" + f) [
"id_ed25519_sarien_user.pub"
"id_ed25519_eldrid_user.pub"
];
};
};