path: root/machines/mbp-work.nix

{ adminUser, pkgs, ... }:
{
  publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINXiA49xsrOJp7wOTYeX5+9o3gly8LyN6gvJoNVQmswv";

  age.secrets = {
    anthropic-api-key = {
      file = ../secrets/anthropic-api-key.age;
      owner = "${toString adminUser.uid}";
    };
  };

  imports = [
    ../profiles/darwin.nix
    ../profiles/home-manager.nix
    ../profiles/users/home-manager.nix
  ];

  users.users.${adminUser.name} = {
    home = "/Users/${adminUser.name}";
    shell = pkgs.fish;
  };

  home-manager.users.${adminUser.name} = {
    home.stateVersion = "23.05";
    home.homeDirectory = "/Users/${adminUser.name}";
    imports = [
      ../home/profiles/darwin.nix
      ../home/profiles/development.nix
      ../home/profiles/k8s.nix
      ../home/programs/hashi.nix
      ../home/programs/sapi.nix
    ];
    home.packages = with pkgs; [
      _1password-cli
      awscli2
      boundary # for secure remote access
      grpcurl
      tfswitch
      vault
    ];
  };
}