22 lines
453 B
Nix
22 lines
453 B
Nix
|
{
|
|||
|
|
pkgs,
|
|||
|
|
specialArgs,
|
|||
|
|
username,
|
|||
|
|
...
|
|||
|
|
}: {
|
|||
|
|
nix.settings.trusted-users = [username];
|
|||
|
|
|
|||
|
|
users = {
|
|||
|
|
mutableUsers = false;
|
|||
|
|
users = {
|
|||
|
|
"${username}" = {
|
|||
|
|
hashedPassword = "${specialArgs.passwdHash}";
|
|||
|
|
isNormalUser = true;
|
|||
|
|
shell = pkgs.fish;
|
|||
|
|
extraGroups = ["docker" "networkmanager" "wheel"]; # Enable ‘sudo’ for the user.
|
|||
|
|
openssh.authorizedKeys.keys = specialArgs.sshKeys;
|
|||
|
|
};
|
|||
|
|
};
|
|||
|
|
};
|
|||
|
|
}
|