restricted more of leylas configs behind full user

This commit is contained in:
Leyla Becker 2024-09-03 14:24:11 -05:00
parent d9bb30a19d
commit 9b520878c4
6 changed files with 23 additions and 23 deletions

View file

@ -16,9 +16,9 @@
sops.age.keyFile = "/home/leyla/.config/sops/age/keys.txt";
users.leyla.isNormalUser = true;
users.ester.isNormalUser = true;
users.eve.isNormalUser = true;
users.leyla.isFullUser = true;
users.ester.isFullUser = true;
users.eve.isFullUser = true;
# Bootloader.
boot.loader.systemd-boot.enable = true;

View file

@ -17,14 +17,14 @@
sops.age.keyFile = "/home/leyla/.config/sops/age/keys.txt";
users.leyla = {
isNormalUser = true;
isFullUser = true;
hasPiperMouse = true;
hasOpenRGBHardware = true;
hasViaKeyboard = true;
hasGPU = true;
};
users.ester.isNormalUser = true;
users.eve.isNormalUser = true;
users.ester.isFullUser = true;
users.eve.isFullUser = true;
# Bootloader.
boot.loader.systemd-boot.enable = true;

View file

@ -4,11 +4,11 @@ let
in
{
options.users.ester = {
isNormalUser = lib.mkEnableOption "ester";
isFullUser = lib.mkEnableOption "ester";
};
config = {
sops.secrets = lib.mkIf cfg.isNormalUser {
sops.secrets = lib.mkIf cfg.isFullUser {
"passwords/ester" = {
neededForUsers = true;
# sopsFile = ../secrets.yaml;
@ -25,7 +25,7 @@ in
}
(
if cfg.isNormalUser then {
if cfg.isFullUser then {
isNormalUser = true;
extraGroups = [ "networkmanager" ];

View file

@ -4,11 +4,11 @@ let
in
{
options.users.eve = {
isNormalUser = lib.mkEnableOption "eve";
isFullUser = lib.mkEnableOption "eve";
};
config = {
sops.secrets = lib.mkIf cfg.isNormalUser {
sops.secrets = lib.mkIf cfg.isFullUser {
"passwords/eve" = {
neededForUsers = true;
# sopsFile = ../secrets.yaml;
@ -25,7 +25,7 @@ in
}
(
if cfg.isNormalUser then {
if cfg.isFullUser then {
isNormalUser = true;
extraGroups = [ "networkmanager" ];

View file

@ -8,7 +8,7 @@ in
];
options.users.leyla = {
isNormalUser = lib.mkEnableOption "create usable leyla user";
isFullUser = lib.mkEnableOption "create usable leyla user";
isThinUser = lib.mkEnableOption "create usable user but witohut user applications";
hasPiperMouse = lib.mkEnableOption "install programs for managing piper supported mouses";
hasOpenRGBHardware = lib.mkEnableOption "install programs for managing openRGB supported hardware";
@ -17,7 +17,7 @@ in
};
config = {
sops.secrets = lib.mkIf cfg.isNormalUser {
sops.secrets = lib.mkIf cfg.isFullUser {
"passwords/leyla" = {
neededForUsers = true;
# sopsFile = ../secrets.yaml;
@ -34,7 +34,7 @@ in
}
(
if (cfg.isNormalUser || cfg.isThinUser) then {
if (cfg.isFullUser || cfg.isThinUser) then {
isNormalUser = true;
extraGroups = lib.mkMerge [
["networkmanager" "wheel" "docker"]
@ -50,6 +50,6 @@ in
)
];
home-manager.users.leyla = lib.mkIf (cfg.isNormalUser || cfg.isThinUser) (import ./home.nix);
home-manager.users.leyla = lib.mkIf (cfg.isFullUser || cfg.isThinUser) (import ./home.nix);
};
}

View file

@ -8,21 +8,21 @@ in
../../overlays/vscodium.nix
];
programs.bash.shellAliases = {
programs.bash.shellAliases = lib.mkIf cfg.isFullUser ({
code = "codium";
};
});
programs.steam = {
programs.steam = lib.mkIf cfg.isFullUser ({
enable = true;
remotePlay.openFirewall = true; # Open ports in the firewall for Steam Remote Play
dedicatedServer.openFirewall = true; # Open ports in the firewall for Source Dedicated Server
};
});
programs.noisetorch.enable = true;
programs.noisetorch.enable = cfg.isFullUser;
programs.adb.enable = true;
programs.adb.enable = cfg.isFullUser;
users.users.leyla.packages = lib.mkIf (cfg.isNormalUser || cfg.isThinUser) (
users.users.leyla.packages = lib.mkIf (cfg.isFullUser || cfg.isThinUser) (
lib.mkMerge [
(
with pkgs; [