33 lines
858 B
Nix
33 lines
858 B
Nix
{
|
|
lib,
|
|
config,
|
|
pkgs,
|
|
...
|
|
}:
|
|
with lib; let
|
|
cfg = config.mySystem.users.phundrak;
|
|
in {
|
|
options.mySystem.users.phundrak = {
|
|
enable = mkEnableOption "Enables user phundrak";
|
|
trusted = mkEnableOption "Mark the user as trusted by Nix";
|
|
extraGroups = mkOption {
|
|
type = types.listOf types.str;
|
|
default = [];
|
|
example = ["feedbackd"];
|
|
};
|
|
};
|
|
|
|
config = {
|
|
users.users.phundrak = mkIf cfg.enable {
|
|
isNormalUser = true;
|
|
description = "Lucien Cartier-Tilet";
|
|
extraGroups = ["networkmanager" "wheel" "docker" "dialout" "podman" "plugdev" "games" "audio" "input"] ++ cfg.extraGroups;
|
|
shell = pkgs.zsh;
|
|
openssh.authorizedKeys.keyFiles = lib.filesystem.listFilesRecursive ../../users/phundrak/keys;
|
|
};
|
|
nix.settings = mkIf cfg.trusted {
|
|
trusted-users = ["phundrak"];
|
|
};
|
|
};
|
|
}
|