wip: refactor: crumb -> msyds

This commit is contained in:
2025-06-17 04:21:04 -06:00
parent 4073d5a077
commit 59982e7b4e
6 changed files with 210 additions and 54 deletions

65
users/msyds/default.nix Executable file → Normal file
View File

@@ -1,70 +1,45 @@
{
systemConfiguration = { config, ... }: {
isNormalUser = true;
# Unfortunately must be hard-coded so we can attribute it to the
# corresponding LDAP user.
uid = 1006;
# TODO: Don't hard-code `persist`. Use
# config.sydnix.impermanence.persistGroupName.
extraGroups = [
# Admin account.
"wheel"
# Default permissions to modify /persist.
"persist"
# Can modify the files served by Nginx.
"nginx"
# Can modify Deertopia's git-annex repos.
"annex"
# Can modify Deertopia's Jellyfin libraries.
"jellyfin"
# Can access slskd's downloads.
"slskd"
# Can access Nixarr's media.
"media"
"www"
];
extraGroups = [ "wheel" "persist" "input" ];
initialHashedPassword =
"$y$j9T$aEFDDwdTZbAc6VQRXrkBJ0$K8wxTGTWDihyX1wxJ.ZMH//wmQFfrGGUkLkxIU0Lyq8";
"$y$j9T$4pyDiPlhnN4UarQoY7Sn70$URZQKPJ3yU4WoQFHRhzm4uF3bM4U7OVYem3oPioykMC";
openssh.authorizedKeys.keyFiles = [
../../public-keys/ssh/crumb-at-guix-rebound.pub
../../public-keys/ssh/crumb-at-nixos-testbed.pub
../../public-keys/ssh/termux.pub
];
};
homeConfiguration = { config, lib, pkgs, ... }: {
home.file.".ssh/id_ed25519".source =
config.lib.file.mkOutOfStoreSymlink
"/persist/private-keys/ssh/lain-at-deertopia";
"/persist/private-keys/ssh/crumb-at-nixos-testbed";
home.file.".ssh/id_ed25519.pub".source =
../../public-keys/ssh/lain-at-deertopia.pub;
../../public-keys/ssh/crumb-at-nixos-testbed.pub;
programs.bash.enable = true;
# A few settings without a home:
xdg.enable = true;
home.preferXdgDirectories = true;
home.sessionVariables = {
"EDITOR" = "nvim";
"VISUAL" = "nvim";
};
home.packages = [];
home.packages = [
pkgs.btop
];
fonts.fontconfig.enable = true;
sydnix = {
impermanence = {
enable = true;
directories = [
".ssh"
"public"
];
xdg.enable = true;
# Personal configurations.
users.crumb = {
bash.enable = true;
direnv.enable = true;
git.enable = true;
nvim.enable = true;
readline.enable = true;
};
users.msyds = {
emacs.enable = true;
};
users.crumb.git.enable = true;
users.crumb.nvim.enable = true;
};
# Don't touch!