path: root/machines/mbp-work.nix

{
  adminUser,
  pkgs,
  lib,
  ...
}:
{
  imports = [
    ../profiles/darwin.nix
    ../profiles/home-manager.nix
    ../profiles/users/home-manager.nix
  ];

  users.users.${adminUser.name} = {
    home = "/Users/${adminUser.name}";
    shell = pkgs.fish;
  };

  home-manager.users.${adminUser.name} = {
    home.stateVersion = "23.05";
    home.homeDirectory = "/Users/${adminUser.name}";
    imports = [
      ../home/profiles/darwin.nix
      ../home/profiles/development.nix
      ../home/profiles/k8s.nix
      ../home/programs/hashi.nix
      ../home/programs/sapi.nix
    ];
    home.packages = with pkgs; [
      awscli2
      boundary # for secure remote access
      grpcurl
      tfswitch
      vault
    ];
    programs.onepassword.sshKeys = lib.mkAfter [
      {
        account = "roblox.1password.com";
        vault = "Private";
      }
    ];
    programs.ssh.matchBlocks."github.rbx.com" = {
      hostname = "github.rbx.com";
      user = "git";
      forwardAgent = false;
      extraOptions = {
        preferredAuthentications = "publickey";
        controlMaster = "no";
        controlPath = "none";
      };
    };
    programs.git.extraConfig.url = {
      "ssh://git@github.rbx.com/" = {
        insteadOf = "https://github.rbx.com/";
      };
    };
  };
}