First step with sops

This commit is contained in:
Julien Malka 2021-12-21 22:55:20 +01:00
parent 2d63b9e96e
commit 516034c19f
5 changed files with 66 additions and 4 deletions

View file

@ -1,10 +1,15 @@
{ config, pkgs, lib, ... }: {
users.mutableUsers = false;
sops.secrets.user-julien-password.neededForUsers = true;
users.users.julien = {
isNormalUser = true;
home = "/home/julien";
extraGroups = [ "wheel" ];
extraGroups = [ "wheel" "keys"];
shell = pkgs.fish;
passwordFile = config.sops.secrets.user-julien-password.path;
openssh.authorizedKeys.keyFiles = [
(pkgs.fetchurl {
url = "https://github.com/JulienMalka.keys";
@ -13,5 +18,5 @@
];
};
nix.allowedUsers = [ "julien" ];
nix.allowedUsers = [ "lol" "julien" ];
}