flake/users/guanranwang/nixos/profiles/core/default.nix
2023-11-30 02:48:13 +08:00

56 lines
1.4 KiB
Nix

{
pkgs,
config,
lib,
...
}: {
users.users."guanranwang" = {
isNormalUser = true;
description = "Guanran Wang";
extraGroups = [
"wheel" # administrator
"networkmanager" # access to networkmanager
"tss" # access to tpm devices
"vboxusers" # access to virtualbox
"nix-access-tokens" # access to github tokens
"libvirtd" # access to virt-manager
];
hashedPasswordFile = config.sops.secrets."hashed-passwd".path;
shell = pkgs.fish;
packages = [];
};
### for default shell
programs.fish.enable = true;
### Options
myFlake.nixos.networking.dns.provider = lib.mkDefault "alidns";
### Flakes
imports = [
../../../../../nixos/flake-modules/sops-nix.nix
../../../../../nixos/flake-modules/home-manager.nix
];
### sops-nix
nix.extraOptions = "!include ${config.sops.secrets.nix-access-tokens.path}";
users.groups."nix-access-tokens" = {};
sops = {
defaultSopsFile = ../../../secrets/secrets.yaml;
age.sshKeyPaths = ["/etc/ssh/ssh_host_ed25519_key"];
gnupg.sshKeyPaths = [];
secrets = {
"hashed-passwd".neededForUsers = true; # Hashed user password
"nix-access-tokens" = {
group = config.users.groups."nix-access-tokens".name;
mode = "0440";
};
};
};
### home-manager
home-manager.users.guanranwang.imports = map (n: ../../../home-manager/${n}) [
"profiles/core"
"profiles/device-type/non-graphical/nixos"
];
}