stuff

hosts/abacus/profiles.nix

@@ -1,3 +1,6 @@
 {
-  profiles.server.enable = true;
+  profiles = {
+    server.enable = true;
+    trusted.enable = true;
+  };
 }

hosts/abacus/static-sites.nix

@@ -1,5 +1,4 @@
 {
-  config,
   lib,
   ...
 }:
@@ -25,7 +24,7 @@ lib.mkMerge (
       };
 
       systemd.tmpfiles.settings."10-static-sites".${root}.d = {
-        user = config.users.mainUser;
+        user = "helvetica";
         group = "users";
         mode = "0755";
       };

hosts/abacus/users.nix

@@ -0,0 +1,13 @@
+{ config, inputs, ... }:
+{
+  age.secrets.user-helvetica.file = inputs.self + /secrets/users/helvetica.age;
+
+  users.users.helvetica = {
+    description = "Helvetica";
+    uid = 1000;
+    isNormalUser = true;
+    hashedPasswordFile = config.age.secrets.user-helvetica.path;
+    openssh.authorizedKeys.keys = builtins.attrValues config.pubkeys.users;
+    extraGroups = [ "wheel" ]; # TODO remove
+  };
+}

hosts/flamingo/profiles.nix

@@ -6,5 +6,6 @@
     gaming.enable = true;
     piracy.enable = true;
     productivity.enable = true;
+    trusted.enable = true;
   };
 }

hosts/flamingo/users.nix

@@ -0,0 +1,13 @@
+{ config, inputs, ... }:
+{
+  age.secrets.user-helvetica.file = inputs.self + /secrets/users/helvetica.age;
+
+  users.users.helvetica = {
+    description = "Helvetica";
+    uid = 1000;
+    isNormalUser = true;
+    hashedPasswordFile = config.age.secrets.user-helvetica.path;
+    openssh.authorizedKeys.keys = builtins.attrValues config.pubkeys.users;
+    extraGroups = [ "wheel" ]; # TODO remove
+  };
+}

hosts/glacier/beets.nix

@@ -0,0 +1,6 @@
+{ pkgs, ... }:
+{
+  environment.systemPackages = [
+    pkgs.beets
+  ];
+}

hosts/glacier/profiles.nix

@@ -6,5 +6,6 @@
     gaming.enable = true;
     piracy.enable = true;
     productivity.enable = true;
+    trusted.enable = true;
   };
 }

hosts/glacier/users.nix

@@ -1,8 +1,13 @@
+{ config, inputs, ... }:
 {
-  users.users.futura = {
-    description = "Futura";
-    uid = 1001;
+  age.secrets.user-helvetica.file = inputs.self + /secrets/users/helvetica.age;
+
+  users.users.helvetica = {
+    description = "Helvetica";
+    uid = 1000;
     isNormalUser = true;
-    password = "futura";
+    hashedPasswordFile = config.age.secrets.user-helvetica.path;
+    openssh.authorizedKeys.keys = builtins.attrValues config.pubkeys.users;
+    extraGroups = [ "wheel" ]; # TODO remove
   };
 }

hosts/insomniac/users.nix

@@ -1,14 +1,14 @@
 {
   config,
-  lib,
   ...
 }:
-let
-  inherit (config.users) mainUser;
-in
 {
-  users = {
-    mainUser = lib.mkForce "insomniac";
-    users.${mainUser}.description = lib.mkForce "Insomniac";
+  users.users.helvetica = {
+    description = "Insomniac";
+    uid = 1000;
+    isNormalUser = true;
+    password = "";
+    openssh.authorizedKeys.keys = builtins.attrValues config.pubkeys.users;
+    extraGroups = [ "wheel" ]; # TODO remove
   };
 }

hosts/vessel/profiles.nix

@@ -1,3 +1,6 @@
 {
-  profiles.server.enable = true;
+  profiles = {
+    server.enable = true;
+    trusted.enable = true;
+  };
 }

hosts/vessel/users.nix

@@ -0,0 +1,13 @@
+{ config, inputs, ... }:
+{
+  age.secrets.user-helvetica.file = inputs.self + /secrets/users/helvetica.age;
+
+  users.users.helvetica = {
+    description = "Helvetica";
+    uid = 1000;
+    isNormalUser = true;
+    hashedPasswordFile = config.age.secrets.user-helvetica.path;
+    openssh.authorizedKeys.keys = builtins.attrValues config.pubkeys.users;
+    extraGroups = [ "wheel" ]; # TODO remove
+  };
+}

hosts/work/users.nix

@@ -1,14 +1,13 @@
+{ config, inputs, ... }:
 {
-  config,
-  lib,
-  ...
-}:
-let
-  inherit (config.users) mainUser;
-in
-{
-  users = {
-    mainUser = lib.mkForce "lukas";
-    users.${mainUser}.description = lib.mkForce "Lukas Wurzinger";
+  age.secrets.user-lukas.file = inputs.self + /secrets/users/helvetica.age;
+
+  users.users.lukas = {
+    description = "Lukas Wurzinger";
+    uid = 1000;
+    isNormalUser = true;
+    hashedPasswordFile = config.age.secrets.user-lukas.path;
+    openssh.authorizedKeys.keys = builtins.attrValues config.pubkeys.users;
+    extraGroups = [ "wheel" ]; # TODO remove
   };
 }