mirror of
https://github.com/kittywitch/nixfiles.git
synced 2026-02-09 12:29:19 -08:00
35 lines
833 B
Nix
35 lines
833 B
Nix
{ config, pkgs, lib, ... }: let
|
|
# TODO: solve lib usage
|
|
inherit (lib.lists) concatLists elem;
|
|
inherit (lib.attrsets) mapAttrsToList;
|
|
commonUser = {
|
|
shell = pkgs.zsh;
|
|
openssh.authorizedKeys.keys = concatLists (mapAttrsToList
|
|
(_: user:
|
|
if elem "wheel" user.extraGroups then
|
|
user.openssh.authorizedKeys.keys
|
|
else
|
|
[ ])
|
|
config.users.users);
|
|
};
|
|
in {
|
|
security.sudo.extraRules = [{
|
|
users = [ "deploy" ];
|
|
commands = [ {
|
|
command = "ALL";
|
|
options = [
|
|
"NOPASSWD"
|
|
"SETENV"
|
|
];
|
|
} ];
|
|
}];
|
|
users.users = {
|
|
root = commonUser // {
|
|
hashedPassword =
|
|
"$6$i28yOXoo$/WokLdKds5ZHtJHcuyGrH2WaDQQk/2Pj0xRGLgS8UcmY2oMv3fw2j/85PRpsJJwCB2GBRYRK5LlvdTleHd3mB.";
|
|
};
|
|
deploy = commonUser // {
|
|
isNormalUser = true;
|
|
};
|
|
};
|
|
}
|