27 lines
608 B
Nix
27 lines
608 B
Nix
{
|
|
lib,
|
|
vars,
|
|
...
|
|
}: {
|
|
nix.settings.trusted-users = ["deploy"]; # trust closures created by our user
|
|
|
|
users.groups.deploy = {};
|
|
users.users.deploy = {
|
|
isSystemUser = false;
|
|
isNormalUser = true; # i want a home directory for some things
|
|
useDefaultShell = true;
|
|
group = "deploy";
|
|
extraGroups = ["wheel"];
|
|
|
|
hashedPassword = lib.mkForce null;
|
|
hashedPasswordFile = lib.mkForce null;
|
|
password = lib.mkForce null;
|
|
passwordFile = lib.mkForce null;
|
|
|
|
openssh.authorizedKeys.keys = with vars.sshKeys; [
|
|
xun_nixdesk
|
|
xun_redmi
|
|
alka_alkpc
|
|
];
|
|
};
|
|
}
|