mirror of
https://github.com/JulienMalka/snowfield.git
synced 2025-03-25 21:30:52 +01:00
33 lines
979 B
Nix
33 lines
979 B
Nix
{ config, pkgs, ... }:
|
|
{
|
|
|
|
users.users.julien = {
|
|
isNormalUser = true;
|
|
home = "/home/julien";
|
|
extraGroups = [
|
|
"wheel"
|
|
config.users.groups.keys.name
|
|
"networkmanager"
|
|
"davfs2"
|
|
"adbusers"
|
|
"audio"
|
|
"pipewire"
|
|
"dialout"
|
|
"video"
|
|
"docker"
|
|
];
|
|
shell = pkgs.fish;
|
|
hashedPasswordFile = config.age.secrets.julien-password.path;
|
|
openssh.authorizedPrincipals = [ "julien" ];
|
|
openssh.authorizedKeys.keys = [
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMAa0wll9ildhgPiV0DhgJXXtw3TQr5VkNxxxPspHSbX julien@gallifrey"
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIADCpuBL/kSZShtXD6p/Nq9ok4w1DnlSoxToYgdOvUqo julien@telecom"
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHH2mPgov6t7oFfEjtZr/DdJW5qSQYqbw+4uYitOCf9n julien@arcadia"
|
|
];
|
|
};
|
|
|
|
nix.settings.allowed-users = [ "julien" ];
|
|
nix.settings.trusted-users = [ "julien" ];
|
|
|
|
age.secrets.julien-password.file = ../secrets/user-julien-password.age;
|
|
}
|