mirror of
https://gitlab.com/upRootNutrition/dotfiles.git
synced 2025-06-15 17:45:12 -05:00
55 lines
851 B
Nix
Executable file
55 lines
851 B
Nix
Executable file
{
|
|
flake,
|
|
config,
|
|
...
|
|
}:
|
|
let
|
|
inherit (flake.config.people)
|
|
user0
|
|
user1
|
|
user2
|
|
;
|
|
inherit (flake.config.machines)
|
|
devices
|
|
;
|
|
hostname = config.networking.hostName;
|
|
mars = devices.mars.name;
|
|
ceres = devices.ceres.name;
|
|
venus = devices.venus.name;
|
|
charon = devices.charon.name;
|
|
deimos = devices.deimos.name;
|
|
|
|
userLogic =
|
|
if
|
|
builtins.elem hostname [
|
|
mars
|
|
deimos
|
|
ceres
|
|
]
|
|
then
|
|
[
|
|
user0
|
|
user1
|
|
]
|
|
else if hostname == charon then
|
|
[ user1 ]
|
|
else if hostname == venus then
|
|
[ user2 ]
|
|
else
|
|
[ ];
|
|
in
|
|
{
|
|
security = {
|
|
doas = {
|
|
enable = true;
|
|
extraRules = [
|
|
{
|
|
keepEnv = true;
|
|
noPass = true;
|
|
users = userLogic;
|
|
}
|
|
];
|
|
};
|
|
# sudo.enable = false;
|
|
};
|
|
}
|