mirror of
https://github.com/ryan4yin/nix-config.git
synced 2026-03-23 01:49:56 +01:00
52 lines
1.3 KiB
Nix
52 lines
1.3 KiB
Nix
{
|
|
myvars,
|
|
config,
|
|
...
|
|
}:
|
|
{
|
|
# Don't allow mutation of users outside the config.
|
|
users.mutableUsers = false;
|
|
|
|
users.groups = {
|
|
"${myvars.username}" = { };
|
|
podman = { };
|
|
docker = { };
|
|
wireshark = { };
|
|
# for android platform tools's udev rules
|
|
adbusers = { };
|
|
dialout = { };
|
|
# for openocd (embedded system development)
|
|
plugdev = { };
|
|
# misc
|
|
uinput = { };
|
|
# shared group for services that read/write the same data directory
|
|
# (e.g. sftpgo + transmission on aquamarine)
|
|
fileshare = { };
|
|
};
|
|
|
|
users.users."${myvars.username}" = {
|
|
# we have to use initialHashedPassword here when using tmpfs for /
|
|
inherit (myvars) initialHashedPassword;
|
|
home = "/home/${myvars.username}";
|
|
isNormalUser = true;
|
|
extraGroups = [
|
|
myvars.username
|
|
"users"
|
|
"wheel"
|
|
"networkmanager" # for nmtui / nm-connection-editor
|
|
"podman"
|
|
"docker"
|
|
"wireshark"
|
|
"adbusers" # android debugging
|
|
"libvirtd" # virt-viewer / qemu
|
|
"fileshare"
|
|
];
|
|
};
|
|
|
|
# root's ssh key are mainly used for remote deployment
|
|
users.users.root = {
|
|
inherit (myvars) initialHashedPassword;
|
|
openssh.authorizedKeys.keys = myvars.mainSshAuthorizedKeys ++ myvars.secondaryAuthorizedKeys;
|
|
};
|
|
}
|