users.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39

{
  config,
  lib,
  machine,
  ...
}: let
  machines = import ./machines.nix;
in {
  users.users =
    builtins.mapAttrs
    (name: value: lib.mkIf (builtins.elem name machine.users) value)
    {
      "andromeda" = {
        isNormalUser = true;
        description = "andromeda";
        hashedPasswordFile = builtins.toString config.age.secrets.secret0.path;
        extraGroups = [
          "networkmanager"
          "wheel"
        ];
      };
      "mtgmonkey" = {
        isNormalUser = true;
        description = "mtgmonkey";
        hashedPasswordFile = builtins.toString config.age.secrets.secret1.path;
        extraGroups = [
          (lib.mkIf
            (machine == machines.lenovo)
            "networkmanager")
          "wheel"
        ];
        openssh.authorizedKeys.keys = [
          (lib.mkIf
            (machine == machines._173-249-5-230)
            config.pub-keys.ssh.andromeda)
        ];
      };
    };
}