40 lines
943 B
Nix
40 lines
943 B
Nix
{
|
|
config,
|
|
lib,
|
|
machine,
|
|
...
|
|
}: let
|
|
machines = import ./machines.nix;
|
|
in {
|
|
users.users =
|
|
builtins.mapAttrs
|
|
(name: value: lib.mkIf (builtins.elem name machine.users) value)
|
|
{
|
|
"andromeda" = {
|
|
isNormalUser = true;
|
|
description = "andromeda";
|
|
hashedPasswordFile = builtins.toString config.age.secrets.secret0.path;
|
|
extraGroups = [
|
|
"networkmanager"
|
|
"wheel"
|
|
];
|
|
};
|
|
"mtgmonkey" = {
|
|
isNormalUser = true;
|
|
description = "mtgmonkey";
|
|
hashedPasswordFile = builtins.toString config.age.secrets.secret1.path;
|
|
extraGroups = [
|
|
(lib.mkIf
|
|
(machine == machines.lenovo)
|
|
"networkmanager")
|
|
"wheel"
|
|
];
|
|
openssh.authorizedKeys.keys = [
|
|
(lib.mkIf
|
|
(machine == machines._173-249-5-230)
|
|
config.pub-keys.ssh.andromeda)
|
|
];
|
|
};
|
|
};
|
|
}
|