clan-infra/modules/admins.nix
a-kenji 944c8a007a
All checks were successful
checks / test (pull_request) Successful in 32s
add remote build key for kenji
2024-02-09 13:01:04 +01:00

52 lines
1.4 KiB
Nix

let
admins = builtins.fromJSON (builtins.readFile ../targets/admins/users.json);
in
{
users.users = {
mic92 = {
isNormalUser = true;
home = "/home/mic92";
extraGroups = [ "wheel" ];
shell = "/run/current-system/sw/bin/zsh";
uid = 1000;
openssh.authorizedKeys.keys = [ admins.mic92 ];
};
lassulus = {
isNormalUser = true;
home = "/home/lassulus";
extraGroups = [ "wheel" ];
shell = "/run/current-system/sw/bin/zsh";
uid = 1001;
openssh.authorizedKeys.keys = [ admins.lassulus ];
};
dave = {
isNormalUser = true;
home = "/home/dave";
extraGroups = [ "wheel" ];
shell = "/run/current-system/sw/bin/fish";
uid = 1002;
openssh.authorizedKeys.keys = [ admins.dave ];
};
qubasa = {
isNormalUser = true;
home = "/home/qubasa";
extraGroups = [ "wheel" ];
shell = "/run/current-system/sw/bin/zsh";
uid = 1003;
openssh.authorizedKeys.keys = [ admins.qubasa ];
};
kenji = {
isNormalUser = true;
home = "/home/kenji";
extraGroups = [ "wheel" ];
shell = "/run/current-system/sw/bin/zsh";
uid = 1004;
openssh.authorizedKeys.keys = [ admins.kenji admins.kenji-remote ];
};
root.openssh.authorizedKeys.keys = builtins.attrValues admins;
};
security.sudo.wheelNeedsPassword = false;
}