37 lines
1.1 KiB
Nix
37 lines
1.1 KiB
Nix
{ flake, pkgs, ... }: {
|
|
users.users.${flake.self.username} = {
|
|
name = flake.self.username;
|
|
group = flake.self.username;
|
|
extraGroups = ["wheel"];
|
|
isNormalUser = true;
|
|
openssh.authorizedKeys.keys = flake.self.publicKeys.admins;
|
|
};
|
|
users.groups.${flake.self.username} = {};
|
|
|
|
# TODO: Remove when we stop locking ourselves out.
|
|
users.users.root.openssh.authorizedKeys.keys = flake.self.publicKeys.admins;
|
|
|
|
users.users.hakkonaut = {
|
|
description = "CI and automation user";
|
|
home = "/home/hakkonaut";
|
|
createHome = true;
|
|
useDefaultShell = true;
|
|
uid = 998;
|
|
group = "hakkonaut";
|
|
isSystemUser = true;
|
|
openssh.authorizedKeys.keys = flake.self.publicKeys.robots;
|
|
};
|
|
|
|
users.groups.hakkonaut = {};
|
|
|
|
users.users.root.initialHashedPassword = "$y$j9T$bIN6GjQkmPMllOcQsq52K0$q0Z5B5.KW/uxXK9fItB8H6HO79RYAcI/ZZdB0Djke32";
|
|
age.secrets."nachtigall-root-ssh-key" = {
|
|
file = "${flake.self}/secrets/nachtigall-root-ssh-key.age";
|
|
path = "/root/.ssh/id_ed25519";
|
|
mode = "400";
|
|
owner = "root";
|
|
};
|
|
|
|
security.sudo.wheelNeedsPassword = false;
|
|
}
|