31 lines
636 B
Nix
31 lines
636 B
Nix
{
|
|
config,
|
|
lib,
|
|
...
|
|
}: let
|
|
inherit (config.users) mainUser;
|
|
in {
|
|
age.secrets = lib.mkSecrets {"user-${mainUser}" = {};};
|
|
|
|
users = {
|
|
mutableUsers = false;
|
|
|
|
mainUser = "lukas";
|
|
|
|
users = {
|
|
root = {
|
|
hashedPassword = "!";
|
|
# TODO define this more granularly
|
|
openssh.authorizedKeys.keys = [];
|
|
};
|
|
${mainUser} = {
|
|
description = "Lukas Wurzinger";
|
|
uid = 1000;
|
|
isNormalUser = true;
|
|
hashedPasswordFile = config.age.secrets."user-${mainUser}".path;
|
|
openssh.authorizedKeys.keys = builtins.attrValues config.pubkeys.users;
|
|
};
|
|
};
|
|
};
|
|
}
|