From 5a904c8507a0adfb7fbb4407ca9c8453da6eba3a Mon Sep 17 00:00:00 2001
From: Lukas Wurzinger <lukas@wrz.one>
Date: Sun, 9 Mar 2025 17:03:39 +0100
Subject: [PATCH] =?UTF-8?q?pluh=20=F0=9F=97=A3?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 common/users.nix | 7 ++-----
 1 file changed, 2 insertions(+), 5 deletions(-)

diff --git a/common/users.nix b/common/users.nix
index fb5a0fc..0d1d2bb 100644
--- a/common/users.nix
+++ b/common/users.nix
@@ -13,17 +13,14 @@ in {
     mainUser = "lukas";
 
     users = {
-      root = {
-        hashedPassword = "!";
-        # TODO define this more granularly
-        openssh.authorizedKeys.keys = [];
-      };
+      root.hashedPassword = "!";
       ${mainUser} = {
         description = "Lukas Wurzinger";
         uid = 1000;
         isNormalUser = true;
         hashedPasswordFile = config.age.secrets."user-${mainUser}".path;
         openssh.authorizedKeys.keys = builtins.attrValues config.pubkeys.users;
+        extraGroups = ["wheel"];
       };
     };
   };