blob: ee29bad4d8ab1b7e3b5d4beb9249c12e33a2413b (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
|
{
pkgs,
lib,
config,
inputs,
...
}: {
imports = [
inputs.home-manager.nixosModules."home-manager"
inputs.agenix.nixosModules
];
config = {
users.users.tzlil = {
isNormalUser = true;
description = "Me";
extraGroups = ["wheel"];
packages = [pkgs.git];
shell = pkgs.fish;
hashedPassword = "$5$itsrHkJPRhLdik0x$RxCXp8KmiPVa1dMQhHMQsjLgvx27MmeQ9ZVybV8bzE8";
openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMDyzrs9sbstv3KFK5FV8qYlSknnEy8Cn+qch4dJLmHA"
];
};
nix.settings.allowed-users = ["root" "tzlil"];
nix.settings.trusted-users = ["root" "tzlil"];
age.secrets.id_ed25519 = {
file = ../secrets/id_ed25519.age;
mode = "600";
owner = "tzlil";
group = "tzlil";
};
home-manager.nixosModules.home-manager = {
home-manager.useGlobalPkgs = true;
home-manager.useUserPackages = true;
home-manager.backupFileExtension = "backup";
};
home-manager.users.tzlil = {pkgs, ...}@hm: {
home = {
stateVersion = "22.05";
username = "tzlil";
homeDirectory = "/home/tzlil";
};
programs.ssh.matchBlocks."*".identityFile = config.age.secrets."id_ed25519".path;
};
};
}
|