40 lines
932 B
Nix
40 lines
932 B
Nix
{
|
|
pkgs,
|
|
lib,
|
|
config,
|
|
...
|
|
}: let
|
|
cfg = config.users.custom.marie;
|
|
in {
|
|
options.users.custom.marie = with lib; {
|
|
enable = mkEnableOption "Enable user 'marie' on this machine";
|
|
};
|
|
|
|
config = lib.mkIf cfg.enable {
|
|
users.users.marie = {
|
|
isNormalUser = true;
|
|
extraGroups = [
|
|
"wheel"
|
|
"networkmanager"
|
|
"video"
|
|
"lp"
|
|
"scanner"
|
|
config.users.groups.keys.name
|
|
];
|
|
hashedPassword = "$6$Fo/q41zf1/tI4dgX$.Y1bnBkGjwkRCOM2gg1yZtAjFQadjAVX8Eq8Llw5Y12ENOycBWtNaCVPli2P7gwNpLSg3p80iG.Zy.T1GR0NG0";
|
|
# This is really just for my comfort
|
|
shell = pkgs.fish;
|
|
};
|
|
|
|
programs.fish.enable = true;
|
|
home-manager.users.marie.imports = [../users/marie/home.nix];
|
|
|
|
sops.secrets."restic-backup-marie" = {
|
|
sopsFile = ../secrets/users/marie/secrets.yaml;
|
|
owner = "marie";
|
|
mode = "0400";
|
|
key = "restic-backup";
|
|
};
|
|
};
|
|
}
|