20 lines
557 B
Nix
20 lines
557 B
Nix
|
{ pkgs, user, config, secrets, ... }:
|
||
|
|
|
||
|
|
{
|
||
|
|
age.secrets.root-pw.file = "${secrets}/root-hash-pw.age";
|
||
|
|
security.sudo.wheelNeedsPassword = false;
|
||
|
|
users.users = {
|
||
|
|
root = {
|
||
|
|
passwordFile = config.age.secrets.root-pw.path;
|
||
|
|
};
|
||
|
|
price = {
|
||
|
|
isNormalUser = true;
|
||
|
|
extraGroups = [ "wheel" ];
|
||
|
|
shell = pkgs.bash;
|
||
|
|
openssh.authorizedKeys.keys = [
|
||
|
|
"no-touch-required sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIJ9ODXLAIfGH/7VNobQsp5nwBvNoh+pQMEH7s2jkHpkqAAAACHNzaDpsdW5h"
|
||
|
|
];
|
||
|
|
};
|
||
|
|
};
|
||
|
|
}
|