restricted more of leylas configs behind full user
This commit is contained in:
parent
d9bb30a19d
commit
9b520878c4
|
@ -16,9 +16,9 @@
|
|||
|
||||
sops.age.keyFile = "/home/leyla/.config/sops/age/keys.txt";
|
||||
|
||||
users.leyla.isNormalUser = true;
|
||||
users.ester.isNormalUser = true;
|
||||
users.eve.isNormalUser = true;
|
||||
users.leyla.isFullUser = true;
|
||||
users.ester.isFullUser = true;
|
||||
users.eve.isFullUser = true;
|
||||
|
||||
# Bootloader.
|
||||
boot.loader.systemd-boot.enable = true;
|
||||
|
|
|
@ -17,14 +17,14 @@
|
|||
sops.age.keyFile = "/home/leyla/.config/sops/age/keys.txt";
|
||||
|
||||
users.leyla = {
|
||||
isNormalUser = true;
|
||||
isFullUser = true;
|
||||
hasPiperMouse = true;
|
||||
hasOpenRGBHardware = true;
|
||||
hasViaKeyboard = true;
|
||||
hasGPU = true;
|
||||
};
|
||||
users.ester.isNormalUser = true;
|
||||
users.eve.isNormalUser = true;
|
||||
users.ester.isFullUser = true;
|
||||
users.eve.isFullUser = true;
|
||||
|
||||
# Bootloader.
|
||||
boot.loader.systemd-boot.enable = true;
|
||||
|
|
|
@ -4,11 +4,11 @@ let
|
|||
in
|
||||
{
|
||||
options.users.ester = {
|
||||
isNormalUser = lib.mkEnableOption "ester";
|
||||
isFullUser = lib.mkEnableOption "ester";
|
||||
};
|
||||
|
||||
config = {
|
||||
sops.secrets = lib.mkIf cfg.isNormalUser {
|
||||
sops.secrets = lib.mkIf cfg.isFullUser {
|
||||
"passwords/ester" = {
|
||||
neededForUsers = true;
|
||||
# sopsFile = ../secrets.yaml;
|
||||
|
@ -25,7 +25,7 @@ in
|
|||
}
|
||||
|
||||
(
|
||||
if cfg.isNormalUser then {
|
||||
if cfg.isFullUser then {
|
||||
isNormalUser = true;
|
||||
extraGroups = [ "networkmanager" ];
|
||||
|
||||
|
|
|
@ -4,11 +4,11 @@ let
|
|||
in
|
||||
{
|
||||
options.users.eve = {
|
||||
isNormalUser = lib.mkEnableOption "eve";
|
||||
isFullUser = lib.mkEnableOption "eve";
|
||||
};
|
||||
|
||||
config = {
|
||||
sops.secrets = lib.mkIf cfg.isNormalUser {
|
||||
sops.secrets = lib.mkIf cfg.isFullUser {
|
||||
"passwords/eve" = {
|
||||
neededForUsers = true;
|
||||
# sopsFile = ../secrets.yaml;
|
||||
|
@ -25,7 +25,7 @@ in
|
|||
}
|
||||
|
||||
(
|
||||
if cfg.isNormalUser then {
|
||||
if cfg.isFullUser then {
|
||||
isNormalUser = true;
|
||||
extraGroups = [ "networkmanager" ];
|
||||
|
||||
|
|
|
@ -8,7 +8,7 @@ in
|
|||
];
|
||||
|
||||
options.users.leyla = {
|
||||
isNormalUser = lib.mkEnableOption "create usable leyla user";
|
||||
isFullUser = lib.mkEnableOption "create usable leyla user";
|
||||
isThinUser = lib.mkEnableOption "create usable user but witohut user applications";
|
||||
hasPiperMouse = lib.mkEnableOption "install programs for managing piper supported mouses";
|
||||
hasOpenRGBHardware = lib.mkEnableOption "install programs for managing openRGB supported hardware";
|
||||
|
@ -17,7 +17,7 @@ in
|
|||
};
|
||||
|
||||
config = {
|
||||
sops.secrets = lib.mkIf cfg.isNormalUser {
|
||||
sops.secrets = lib.mkIf cfg.isFullUser {
|
||||
"passwords/leyla" = {
|
||||
neededForUsers = true;
|
||||
# sopsFile = ../secrets.yaml;
|
||||
|
@ -34,7 +34,7 @@ in
|
|||
}
|
||||
|
||||
(
|
||||
if (cfg.isNormalUser || cfg.isThinUser) then {
|
||||
if (cfg.isFullUser || cfg.isThinUser) then {
|
||||
isNormalUser = true;
|
||||
extraGroups = lib.mkMerge [
|
||||
["networkmanager" "wheel" "docker"]
|
||||
|
@ -50,6 +50,6 @@ in
|
|||
)
|
||||
];
|
||||
|
||||
home-manager.users.leyla = lib.mkIf (cfg.isNormalUser || cfg.isThinUser) (import ./home.nix);
|
||||
home-manager.users.leyla = lib.mkIf (cfg.isFullUser || cfg.isThinUser) (import ./home.nix);
|
||||
};
|
||||
}
|
|
@ -8,21 +8,21 @@ in
|
|||
../../overlays/vscodium.nix
|
||||
];
|
||||
|
||||
programs.bash.shellAliases = {
|
||||
programs.bash.shellAliases = lib.mkIf cfg.isFullUser ({
|
||||
code = "codium";
|
||||
};
|
||||
});
|
||||
|
||||
programs.steam = {
|
||||
programs.steam = lib.mkIf cfg.isFullUser ({
|
||||
enable = true;
|
||||
remotePlay.openFirewall = true; # Open ports in the firewall for Steam Remote Play
|
||||
dedicatedServer.openFirewall = true; # Open ports in the firewall for Source Dedicated Server
|
||||
};
|
||||
});
|
||||
|
||||
programs.noisetorch.enable = true;
|
||||
programs.noisetorch.enable = cfg.isFullUser;
|
||||
|
||||
programs.adb.enable = true;
|
||||
programs.adb.enable = cfg.isFullUser;
|
||||
|
||||
users.users.leyla.packages = lib.mkIf (cfg.isNormalUser || cfg.isThinUser) (
|
||||
users.users.leyla.packages = lib.mkIf (cfg.isFullUser || cfg.isThinUser) (
|
||||
lib.mkMerge [
|
||||
(
|
||||
with pkgs; [
|
||||
|
|
Loading…
Reference in a new issue