forked from pub-solar/infra
31 lines
918 B
Nix
31 lines
918 B
Nix
|
{ flake, pkgs, ... }: {
|
||
|
|
users.users.${flake.self.username} = {
|
||
|
|
name = flake.self.username;
|
||
|
|
group = flake.self.username;
|
||
|
|
extraGroups = ["wheel"];
|
||
|
|
isNormalUser = true;
|
||
|
|
openssh.authorizedKeys.keys = flake.self.publicKeys.admins;
|
||
|
|
};
|
||
|
|
users.groups.${flake.self.username} = {};
|
||
|
|
|
||
|
|
# TODO: Remove when we stop locking ourselves out.
|
||
|
|
users.users.root.openssh.authorizedKeys.keys = flake.self.publicKeys.admins;
|
||
|
|
|
||
|
|
users.users.hakkonaut = {
|
||
|
|
description = "CI and automation user";
|
||
|
|
home = "/home/hakkonaut";
|
||
|
|
createHome = true;
|
||
|
|
useDefaultShell = true;
|
||
|
|
uid = 998;
|
||
|
|
group = "hakkonaut";
|
||
|
|
isSystemUser = true;
|
||
|
|
openssh.authorizedKeys.keys = flake.self.publicKeys.robots;
|
||
|
|
};
|
||
|
|
|
||
|
|
users.groups.hakkonaut = {};
|
||
|
|
|
||
|
|
users.users.root.initialHashedPassword = "$y$j9T$bIN6GjQkmPMllOcQsq52K0$q0Z5B5.KW/uxXK9fItB8H6HO79RYAcI/ZZdB0Djke32";
|
||
|
|
|
||
|
|
security.sudo.wheelNeedsPassword = false;
|
||
|
|
}
|