fruchti
d2daab08a1
- Explicitly enable fish - No longer use OpenSSL 1.1 for BURP (decryption now seems to work fine with current OpenSSL) - Move sshd settings to `settings`
34 lines
820 B
Nix
34 lines
820 B
Nix
{ pkgs, lib, ... }:
|
|
let
|
|
definedInPersonalDotNix = lib.mkDefault (throw "Configuration option missing from personal.nix");
|
|
in
|
|
{
|
|
programs.fish.enable = true;
|
|
|
|
users.users = {
|
|
fruchti = {
|
|
isNormalUser = true;
|
|
extraGroups = [ "wheel" "networkmanager" "audio" "video" ];
|
|
openssh.authorizedKeys.keys = definedInPersonalDotNix;
|
|
shell = pkgs.fish;
|
|
};
|
|
};
|
|
users.extraGroups = {
|
|
system = {
|
|
members = [ "fruchti" ];
|
|
};
|
|
};
|
|
|
|
security.sudo.extraRules = [
|
|
{
|
|
groups = [ "wheel" ];
|
|
commands = [
|
|
{
|
|
command = "${pkgs.nixos-rebuild}/bin/nixos-rebuild *";
|
|
options = [ "NOPASSWD" ];
|
|
}
|
|
];
|
|
}
|
|
];
|
|
}
|