35 lines
785 B
Nix
Executable File
35 lines
785 B
Nix
Executable File
{
|
|
systemConfiguration = { config, ... }: {
|
|
isNormalUser = true;
|
|
# TODO: Don't hard-code `persist`. Use
|
|
# config.sydnix.impermanence.persistGroupName.
|
|
extraGroups = [ "wheel" "persist" ];
|
|
initialHashedPassword =
|
|
"$y$j9T$aEFDDwdTZbAc6VQRXrkBJ0$K8wxTGTWDihyX1wxJ.ZMH//wmQFfrGGUkLkxIU0Lyq8";
|
|
|
|
openssh.authorizedKeys.keyFiles = [
|
|
../../public-keys/crumb-at-guix-rebound.pub
|
|
];
|
|
};
|
|
|
|
homeConfiguration = { config, lib, pkgs, ... }: {
|
|
imports = [
|
|
./programs.nix
|
|
./files.nix
|
|
];
|
|
|
|
xdg.enable = true;
|
|
|
|
sydnix = {
|
|
gpg.enable = true;
|
|
sops = {
|
|
enable = true;
|
|
keyFile = "/persist/private-keys/age/${config.home.username}";
|
|
};
|
|
};
|
|
|
|
# Don't touch!
|
|
home.stateVersion = "18.09";
|
|
};
|
|
}
|