nixos/modules/user/zem/default.nix
2024-03-19 22:06:46 +08:00

25 lines
753 B
Nix

inputs:
{
config =
let
inherit (inputs.lib) mkIf;
inherit (inputs.config.nixos) user;
in mkIf (builtins.elem "zem" user.users)
{
users.users.zem =
{
extraGroups = inputs.lib.intersectLists
[ "groupshare" ]
(builtins.attrNames inputs.config.users.groups);
hashedPasswordFile = inputs.config.sops.secrets."users/zem".path;
openssh.authorizedKeys.keys = [ (builtins.readFile ./id_rsa.pub) ];
autoSubUidGidRange = true;
};
home-manager.users.zem = homeInputs:
{
config.home.file.groupshare.source = homeInputs.config.lib.file.mkOutOfStoreSymlink "/var/lib/groupshare";
};
sops.secrets."users/zem".neededForUsers = true;
};
}