68d8526542
Move service credentials and Wi-Fi keys behind agenix, rotate exposed LLDAP and Vikunja credentials, disable SSH password authentication, and remove obsolete CLAUDE.md guidance.
33 lines
958 B
Nix
33 lines
958 B
Nix
{
|
|
config,
|
|
pkgs,
|
|
inputs,
|
|
...
|
|
}: {
|
|
users.users.builder = {
|
|
isNormalUser = true;
|
|
description = "builder";
|
|
extraGroups = [
|
|
"wheel"
|
|
"docker"
|
|
];
|
|
shell = pkgs.zsh;
|
|
openssh.authorizedKeys.keys = [
|
|
#######
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILrZETtzrSfkomL9H31SuyQJ8O39ujMIjsCkbjL4DgxM"
|
|
#ipad
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDiL1HC9SzfP1Bm3ZDU3QOKEIfyRVry1e+G5egtw9/hA mobile@localhost"
|
|
#ssh iphone
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFcWcFktM6blTjTyGh7iw7Dp7oTt18kebJWqWbw+48xQ mobile@localhost"
|
|
#pinix
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBd4uNF7ovCrh23ddEss8bPmaz+v+iepM8ZF4gWB10/L drone@pinix"
|
|
|
|
#blunix
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIByyKW+cgtXpir9qhLMyoBOjQj932es1Yr3/BxqTHU6J drone@blunix"
|
|
];
|
|
};
|
|
home-manager.users.builder =
|
|
if config.networking.hostName == "tnix"
|
|
then import ../../home/tnix/builder.nix
|
|
else { };
|
|
}
|