Added domain option. Maybe fixed binary cache signing.
This commit is contained in:
parent
63e40a5a29
commit
66ca5839e5
17 changed files with 238 additions and 139 deletions
|
@ -1,5 +1,7 @@
|
|||
{ config, lib, pkgs, ... }:
|
||||
|
||||
with lib;
|
||||
|
||||
{
|
||||
users = {
|
||||
mutableUsers = false;
|
||||
|
@ -9,13 +11,16 @@
|
|||
createHome = true;
|
||||
description = "";
|
||||
group = "derped";
|
||||
extraGroups = [ "audio" "wheel" "network" ] ++ (if config.machine.hostName != "Ophanim" then ["input" "cups" "lp" "docker"] else []);
|
||||
extraGroups = [ "audio" "wheel" "network" ]
|
||||
++ (if config.services.xserver.enable then [ "input" ] else [])
|
||||
++ (if config.services.printing.enable then [ "cups" "lp" ] else [])
|
||||
++ (if config.virtualisation.docker.enable then [ "docker"] else []);
|
||||
uid = 1337;
|
||||
shell = "/run/current-system/sw/bin/zsh";
|
||||
passwordFile = "/secret/derped";
|
||||
openssh.authorizedKeys.keyFiles = (if config.machine.hostName != "Ophanim" then [] else [ "/secret/derped.pub" ]);
|
||||
openssh.authorizedKeys.keyFiles = if config.services.openssh.enable then [ "/secret/derped.pub" ] else [];
|
||||
};
|
||||
|
||||
|
||||
groups.derped = {
|
||||
name = "derped";
|
||||
gid = 1337;
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue