machines/mbp-work.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59

{
  adminUser,
  pkgs,
  lib,
  ...
}:
{
  imports = [
    ../profiles/darwin.nix
    ../profiles/home-manager.nix
    ../profiles/users/home-manager.nix
  ];

  users.users.${adminUser.name} = {
    home = "/Users/${adminUser.name}";
    shell = pkgs.fish;
  };

  home-manager.users.${adminUser.name} = {
    home.stateVersion = "23.05";
    home.homeDirectory = "/Users/${adminUser.name}";
    imports = [
      ../home/profiles/mac.nix
      ../programs/dev/k8s.nix
      ../programs/dev/k9s.nix
      ../programs/dev/kubie.nix
      ../programs/security/hashi.nix
      ../programs/security/sapi.nix
    ];
    home.packages = with pkgs; [
      awscli2
      boundary # for secure remote access
      grpcurl
      tfswitch
      vault
    ];
    programs.onepassword.sshKeys = lib.mkAfter [
      {
        account = "roblox.1password.com";
        vault = "Private";
      }
    ];
    programs.ssh.matchBlocks."github.rbx.com" = {
      hostname = "github.rbx.com";
      user = "git";
      forwardAgent = false;
      extraOptions = {
        preferredAuthentications = "publickey";
        controlMaster = "no";
        controlPath = "none";
      };
    };
    programs.git.extraConfig.url = {
      "ssh://git@github.rbx.com/" = {
        insteadOf = "https://github.rbx.com/";
      };
    };
  };
}