profiles/users/builder.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21

{ adminUser, ... }:
{
  nix.settings.trusted-users = [ "builder" ];

  users.users.builder = {
    openssh.authorizedKeys.keys =
      with adminUser.userinfo.sshPublicKeys;
      [
        onepassword
        yubikey-personal-nano
        yubikey-personal-keychain
        yubikey-personal-backup
      ]
      ++ [
        # remote builder ssh key
        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGFGxdplt9WwGjdhoYkmPe2opZMJShtpqnGCI+swrgvw"
      ];
    isNormalUser = true;
    group = "nogroup";
  };
}