feat(www): www

users/lain/default.nix

@@ -27,6 +27,7 @@
       ../../public-keys/ssh/crumble-at-fruitbook.pub
       ../../public-keys/ssh/crumb-at-nixos-testbed.pub
       ../../public-keys/ssh/termux.pub
+      ../../public-keys/ssh/windows.pub
     ];
   };
 

users/liv/default.nix

@@ -0,0 +1,28 @@
+{
+  systemConfiguration = { config, ... }: {
+    isNormalUser = true;
+
+    # Unfortunately must be hard-coded so we can attribute it to the
+    # corresponding LDAP user.
+    uid = 1007;
+
+    extraGroups = [ "www" ];
+
+    openssh.authorizedKeys.keyFiles = [
+      ../../public-keys/ssh/liv.pub
+      ../../public-keys/ssh/windows.pub
+    ];
+  };
+
+  homeConfiguration = { config, lib, pkgs, ... }: {
+    programs.bash.enable = true;
+    programs.emacs.enable = true;
+
+    home.packages = [
+      pkgs.nano
+    ];
+
+    # Don't touch!
+    home.stateVersion = "18.09";
+  };
+}

users/msyds/default.nix

@@ -0,0 +1,73 @@
+{
+  systemConfiguration = { config, ... }: {
+    isNormalUser = true;
+
+    # Unfortunately must be hard-coded so we can attribute it to the
+    # corresponding LDAP user.
+    uid = 1006;
+
+    # TODO: Don't hard-code `persist`.  Use
+    # config.sydnix.impermanence.persistGroupName.
+    extraGroups = [
+      # Admin account.
+      "wheel"
+      # Default permissions to modify /persist.
+      "persist"
+      # Can modify the files served by Nginx.
+      "nginx"
+      # Can modify Deertopia's git-annex repos.
+      "annex"
+      # Can modify Deertopia's Jellyfin libraries.
+      "jellyfin"
+      # Can access slskd's downloads.
+      "slskd"
+      # Can access Nixarr's media.
+      "media"
+      "www"
+    ];
+
+    initialHashedPassword =
+      "$y$j9T$aEFDDwdTZbAc6VQRXrkBJ0$K8wxTGTWDihyX1wxJ.ZMH//wmQFfrGGUkLkxIU0Lyq8";
+
+    openssh.authorizedKeys.keyFiles = [
+      ../../public-keys/ssh/crumb-at-guix-rebound.pub
+      ../../public-keys/ssh/crumb-at-nixos-testbed.pub
+      ../../public-keys/ssh/termux.pub
+    ];
+  };
+
+  homeConfiguration = { config, lib, pkgs, ... }: {
+    home.file.".ssh/id_ed25519".source =
+      config.lib.file.mkOutOfStoreSymlink
+        "/persist/private-keys/ssh/lain-at-deertopia";
+
+    home.file.".ssh/id_ed25519.pub".source =
+      ../../public-keys/ssh/lain-at-deertopia.pub;
+
+    programs.bash.enable = true;
+
+    home.sessionVariables = {
+      "EDITOR" = "nvim";
+      "VISUAL" = "nvim";
+    };
+
+    home.packages = [
+      pkgs.btop
+    ];
+
+    sydnix = {
+      impermanence = {
+        enable = true;
+        directories = [
+          ".ssh"
+          "public"
+        ];
+      };
+      users.crumb.git.enable = true;
+      users.crumb.nvim.enable = true;
+    };
+
+    # Don't touch!
+    home.stateVersion = "18.09";
+  };
+}

users/msyds/files.nix

@@ -0,0 +1,9 @@
+{ config, lib, pkgs, ... }:
+
+let mutableSymlink = config.lib.file.mkOutOfStoreSymlink;
+in {
+  home.file.".ssh/id_ed25519".source =
+    mutableSymlink "/persist/private-keys/ssh/lain-at-deertopia";
+  home.file.".ssh/id_ed25519.pub".source =
+    ../../public-keys/ssh/lain-at-deertopia.pub;
+}