44 lines
774 B
Nix
44 lines
774 B
Nix
{
|
|
lib,
|
|
config,
|
|
pkgs,
|
|
inputs,
|
|
...
|
|
}: let
|
|
cfg = config.users.ester;
|
|
in {
|
|
options.users.ester = {
|
|
isFullUser = lib.mkEnableOption "ester";
|
|
};
|
|
|
|
config = {
|
|
nixpkgs.config.allowUnfree = true;
|
|
|
|
sops.secrets = lib.mkIf cfg.isFullUser {
|
|
"passwords/ester" = {
|
|
neededForUsers = true;
|
|
sopsFile = "${inputs.secrets}/user-passwords.yaml";
|
|
};
|
|
};
|
|
|
|
users.users.ester = (
|
|
if cfg.isFullUser
|
|
then {
|
|
isNormalUser = true;
|
|
extraGroups = ["networkmanager"];
|
|
|
|
hashedPasswordFile = config.sops.secrets."passwords/ester".path;
|
|
|
|
packages = with pkgs; [
|
|
firefox
|
|
bitwarden
|
|
discord
|
|
];
|
|
}
|
|
else {
|
|
isSystemUser = true;
|
|
}
|
|
);
|
|
};
|
|
}
|