29 lines
673 B
Nix
29 lines
673 B
Nix
{ config, ... }:
|
|
let
|
|
cfg = config.selfprivacy;
|
|
in
|
|
{
|
|
users = {
|
|
mutableUsers = false;
|
|
allowNoPasswordLogin = true;
|
|
users =
|
|
{
|
|
"${cfg.username}" = {
|
|
isNormalUser = true;
|
|
hashedPassword = cfg.hashedMasterPassword;
|
|
openssh.authorizedKeys.keys = cfg.sshKeys;
|
|
};
|
|
}
|
|
// builtins.listToAttrs (
|
|
builtins.map (user: {
|
|
name = "${user.username}";
|
|
value = {
|
|
isNormalUser = true;
|
|
hashedPassword = user.hashedPassword;
|
|
openssh.authorizedKeys.keys = (if user ? sshKeys then user.sshKeys else [ ]);
|
|
};
|
|
}) cfg.users
|
|
);
|
|
};
|
|
}
|