50 lines
1.1 KiB
Nix
50 lines
1.1 KiB
Nix
{ config, lib, pkgs, isUnstable, ... }:
|
|
|
|
with lib;
|
|
|
|
let
|
|
userBase = {
|
|
shell = pkgs.zsh;
|
|
openssh.authorizedKeys.keys = config.myconf.hwPubKeys
|
|
++ config.myconf.managementPubKeys;
|
|
};
|
|
in {
|
|
options = {
|
|
defaultUsers = {
|
|
enable = mkOption {
|
|
description = "Enable regular set of users";
|
|
default = true;
|
|
example = true;
|
|
type = lib.types.bool;
|
|
};
|
|
};
|
|
};
|
|
|
|
config = mkIf config.defaultUsers.enable {
|
|
users.users.root = userBase;
|
|
users.users.qbit = userBase // {
|
|
isNormalUser = true;
|
|
description = "Aaron Bieber";
|
|
home = "/home/qbit";
|
|
extraGroups = [ "wheel" ];
|
|
};
|
|
|
|
programs.ssh = {
|
|
startAgent = true;
|
|
agentTimeout = "100m";
|
|
extraConfig = ''
|
|
VerifyHostKeyDNS yes
|
|
AddKeysToAgent confirm 90m
|
|
CanonicalizeHostname always
|
|
|
|
Host *
|
|
controlmaster auto
|
|
controlpath /tmp/ssh-%r@%h:%p
|
|
'';
|
|
};
|
|
|
|
environment.systemPackages =
|
|
if isUnstable then [ pkgs.yash pkgs.go ] else [ pkgs.go ];
|
|
};
|
|
}
|