Bruno BELANYI
012163eb44
This enables usage of ZSA tools, such as `wally` or their online training tool for any users that are part of `plugdev`.
36 lines
1 KiB
Nix
36 lines
1 KiB
Nix
# User setup
|
|
{ config, lib, pkgs, ... }:
|
|
let
|
|
my = config.my;
|
|
groupIfExists = grp:
|
|
lib.lists.optional
|
|
(builtins.hasAttr grp config.users.groups)
|
|
grp;
|
|
groupsIfExist = grps: builtins.concatMap groupIfExists grps;
|
|
in
|
|
{
|
|
users.mutableUsers = false; # I want it to be declarative.
|
|
|
|
# Define user accounts and passwords.
|
|
users.users.root.hashedPassword = my.secrets.users.root.hashedPassword;
|
|
users.users.ambroisie = {
|
|
hashedPassword = my.secrets.users.ambroisie.hashedPassword;
|
|
description = "Bruno BELANYI";
|
|
isNormalUser = true;
|
|
shell = pkgs.zsh;
|
|
extraGroups = groupsIfExist [
|
|
"plugdev" # usage of ZSA keyboard tools
|
|
"media" # access to media files
|
|
"wheel" # `sudo` for the user.
|
|
];
|
|
openssh.authorizedKeys.keys = with builtins; let
|
|
keyDir = ./ssh;
|
|
contents = readDir keyDir;
|
|
names = attrNames contents;
|
|
files = filter (name: contents.${name} == "regular") names;
|
|
keys = map (basename: readFile (keyDir + "/${basename}")) files;
|
|
in
|
|
keys;
|
|
};
|
|
}
|