flake/users/guanranwang/nixos.nix

41 lines
1.3 KiB
Nix
Raw Normal View History

{ pkgs, config, ... }:
2023-09-19 00:17:43 +00:00
{
users.users."guanranwang" = {
2023-09-19 00:17:43 +00:00
isNormalUser = true;
description = "Guanran Wang";
extraGroups = [ "wheel" "networkmanager" "tss" ]; # tss = access to tpm devices
hashedPasswordFile = config.sops.secrets."hashed-passwd".path;
2023-09-19 00:17:43 +00:00
shell = pkgs.fish;
packages = [];
};
2023-10-09 14:13:21 +00:00
# Flakes
imports = [
../../flakes/nixos/home-manager.nix
../../flakes/nixos/sops-nix.nix
../../flakes/nixos/hosts.nix
../../flakes/nixos/berberman.nix
];
### home-manager
2023-10-09 14:13:21 +00:00
home-manager.users.guanranwang = import ./home-manager/nixos;
### sops-nix
sops = {
2023-10-09 14:13:21 +00:00
defaultSopsFile = ./secrets/secrets.yaml;
2023-10-12 14:21:14 +00:00
age.sshKeyPaths = [ "/nix/persist/system/etc/ssh/ssh_host_ed25519_key" ];
gnupg.sshKeyPaths = [];
secrets = {
"hashed-passwd".neededForUsers = true; # Hashed user password
"wireless/home".path = "/var/lib/iwd/wangxiaobo.psk"; # Home wifi password
"clash-config" = { # Clash.Meta configuration
#mode = "0444"; # readable
owner = config.users.users."clash-meta".name;
group = config.users.users."clash-meta".group;
restartUnits = [ "clash-meta.service" ];
path = "/etc/clash-meta/config.yaml";
};
};
};
2023-09-19 00:17:43 +00:00
}