mirror of
https://github.com/JulienMalka/snowfield.git
synced 2025-03-26 05:40:52 +01:00
33 lines
854 B
Nix
33 lines
854 B
Nix
{ config, pkgs, lib, ... }: {
|
|
|
|
sops.secrets.user-julien-password.neededForUsers = true;
|
|
|
|
users.users.julien = {
|
|
isNormalUser = true;
|
|
home = "/home/julien";
|
|
extraGroups = [ "wheel" config.users.groups.keys.name ];
|
|
shell = pkgs.fish;
|
|
passwordFile = config.sops.secrets.user-julien-password.path;
|
|
openssh.authorizedKeys.keyFiles = [
|
|
(pkgs.fetchurl {
|
|
url = "https://github.com/JulienMalka.keys";
|
|
sha256 = "sha256-nBgn7jOqi/nPHhTy3x/oirL+A4X2gbmwy1NXLZhV99M=";
|
|
})
|
|
];
|
|
};
|
|
|
|
nix.allowedUsers = [ "julien" ];
|
|
sops.secrets.ens-mail-passwd = {
|
|
owner = "julien";
|
|
path = "/home/julien/.config/ens-mail-passwd";
|
|
};
|
|
|
|
sops.secrets.sendinblue-mail-passwd = { };
|
|
sops.secrets.git-gpg-private-key = {
|
|
owner = "julien";
|
|
mode = "0440";
|
|
group = config.users.groups.keys.name;
|
|
};
|
|
|
|
|
|
}
|