mirror of
https://github.com/foo-dogsquared/nixos-config.git
synced 2025-04-25 12:19:12 +00:00
profiles/users: move as a library function
This commit is contained in:
parent
40492d55b7
commit
7ad9a62f2c
@ -107,6 +107,12 @@
|
|||||||
|
|
||||||
# The default configuration for our NixOS systems.
|
# The default configuration for our NixOS systems.
|
||||||
hostDefaultConfig = { pkgs, system, ... }: {
|
hostDefaultConfig = { pkgs, system, ... }: {
|
||||||
|
# Only use imports as minimally as possible with the absolute
|
||||||
|
# requirements of a host.
|
||||||
|
imports = [
|
||||||
|
inputs.home-manager.nixosModules.home-manager
|
||||||
|
];
|
||||||
|
|
||||||
# Bleeding edge, baybee!
|
# Bleeding edge, baybee!
|
||||||
nix.package = pkgs.nixUnstable;
|
nix.package = pkgs.nixUnstable;
|
||||||
|
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
{ config, pkgs, inputs, ... }:
|
{ config, pkgs, lib, inputs, ... }:
|
||||||
|
|
||||||
{
|
{
|
||||||
imports = [
|
imports = [
|
||||||
@ -6,6 +6,15 @@
|
|||||||
./hardware-configuration.nix
|
./hardware-configuration.nix
|
||||||
|
|
||||||
inputs.guix-overlay.nixosModules.guix-binary
|
inputs.guix-overlay.nixosModules.guix-binary
|
||||||
|
|
||||||
|
(lib.mapHomeManagerUser "foo-dogsquared" {
|
||||||
|
extraGroups = [ "wheel" "audio" "docker" "podman" "networkmanager" ];
|
||||||
|
hashedPassword =
|
||||||
|
"$6$.cMYto0K0CHbpIMT$dRqyKs4q1ppzmTpdzy5FWP/V832a6X..FwM8CJ30ivK0nfLjQ7DubctxOZbeOtygfjcUd1PZ0nQoQpOg/WMvg.";
|
||||||
|
isNormalUser = true;
|
||||||
|
createHome = true;
|
||||||
|
home = "/home/foo-dogsquared";
|
||||||
|
})
|
||||||
];
|
];
|
||||||
|
|
||||||
boot.binfmt.emulatedSystems = [
|
boot.binfmt.emulatedSystems = [
|
||||||
@ -31,14 +40,6 @@
|
|||||||
virtualization.enable = true;
|
virtualization.enable = true;
|
||||||
neovim.enable = true;
|
neovim.enable = true;
|
||||||
};
|
};
|
||||||
users.users.foo-dogsquared.settings = {
|
|
||||||
extraGroups = [ "wheel" "audio" "docker" "podman" "networkmanager" ];
|
|
||||||
hashedPassword =
|
|
||||||
"$6$.cMYto0K0CHbpIMT$dRqyKs4q1ppzmTpdzy5FWP/V832a6X..FwM8CJ30ivK0nfLjQ7DubctxOZbeOtygfjcUd1PZ0nQoQpOg/WMvg.";
|
|
||||||
isNormalUser = true;
|
|
||||||
createHome = true;
|
|
||||||
home = "/home/foo-dogsquared";
|
|
||||||
};
|
|
||||||
};
|
};
|
||||||
|
|
||||||
tasks = {
|
tasks = {
|
||||||
|
@ -3,6 +3,21 @@
|
|||||||
{ lib }:
|
{ lib }:
|
||||||
|
|
||||||
rec {
|
rec {
|
||||||
|
mapHomeManagerUser = user: settings:
|
||||||
|
let
|
||||||
|
defaultUserConfig = {
|
||||||
|
extraGroups = [ "wheel" ];
|
||||||
|
createHome = true;
|
||||||
|
home = "/home/${user}";
|
||||||
|
};
|
||||||
|
# TODO: Effectively override the option.
|
||||||
|
# We assume all users set with this module are normal users.
|
||||||
|
absoluteOverrides = { isNormalUser = true; };
|
||||||
|
in {
|
||||||
|
home-manager.users."${user}" = import (lib.getUser "home-manager" user);
|
||||||
|
users.users."${user}" = defaultUserConfig // settings // absoluteOverrides;
|
||||||
|
};
|
||||||
|
|
||||||
getSecret = path: ../secrets/${path};
|
getSecret = path: ../secrets/${path};
|
||||||
|
|
||||||
getUsers = type: users:
|
getUsers = type: users:
|
||||||
|
@ -1,87 +0,0 @@
|
|||||||
# This enables home-manager specific configs and an easier modularization for
|
|
||||||
# user-specific configurations. This is specifically for creating a convenient
|
|
||||||
# way to create users from `users/home-manager`.
|
|
||||||
#
|
|
||||||
# If you're looking to create users from `users/nixos`, you can just import
|
|
||||||
# them directly.
|
|
||||||
{ inputs, config, options, lib, ... }:
|
|
||||||
|
|
||||||
let
|
|
||||||
cfg = config.profiles.users;
|
|
||||||
users = lib.attrNames cfg.users;
|
|
||||||
homeManagerUserModules = lib.getUsers "home-manager" users;
|
|
||||||
homeManagerModules = lib.filesToAttr ../../home-manager;
|
|
||||||
|
|
||||||
homeManagerUsers = lib.attrNames homeManagerUserModules;
|
|
||||||
nonexistentUsers = lib.filter (name: !lib.elem name homeManagerUsers) users;
|
|
||||||
|
|
||||||
userOption = { name, config, ... }: {
|
|
||||||
options = {
|
|
||||||
settings = lib.mkOption {
|
|
||||||
type = lib.types.attrs;
|
|
||||||
description = ''
|
|
||||||
Configuration to be merged in <literal>users.users.<name></literal>
|
|
||||||
from NixOS configuration.
|
|
||||||
'';
|
|
||||||
default = { };
|
|
||||||
example = {
|
|
||||||
uid = 1234;
|
|
||||||
description = "John Doe";
|
|
||||||
extraGroups = [ "wheel" "adbusers" "audio" ];
|
|
||||||
};
|
|
||||||
};
|
|
||||||
};
|
|
||||||
};
|
|
||||||
|
|
||||||
mapUsers = f: lib.mapAttrs f cfg.users;
|
|
||||||
in {
|
|
||||||
options.profiles.users = {
|
|
||||||
users = lib.mkOption {
|
|
||||||
default = { };
|
|
||||||
description = ''
|
|
||||||
A set of users from the <filename>./users/home-manager</filename>
|
|
||||||
directory to be included in the NixOS config. This will also create the
|
|
||||||
appropriate user settings in <literal>users.users</literal> in the
|
|
||||||
NixOS configuration.
|
|
||||||
'';
|
|
||||||
example = {
|
|
||||||
foo-dogsquared.settings = {
|
|
||||||
extraGroups = [ "wheel" "audio" "libvirtd" ];
|
|
||||||
};
|
|
||||||
alice = { };
|
|
||||||
bob = { };
|
|
||||||
};
|
|
||||||
type = with lib.types; attrsOf (submodule userOption);
|
|
||||||
};
|
|
||||||
};
|
|
||||||
|
|
||||||
imports = [ inputs.home-manager.nixosModules.home-manager ];
|
|
||||||
|
|
||||||
config = {
|
|
||||||
assertions = [{
|
|
||||||
assertion = (builtins.length nonexistentUsers) < 1;
|
|
||||||
message = "${
|
|
||||||
lib.concatMapStringsSep ", " (u: "'${u}'") nonexistentUsers
|
|
||||||
} is not found in the `./users/home-manager` directory.";
|
|
||||||
}];
|
|
||||||
|
|
||||||
# Mapping each users to the respective user configuration.
|
|
||||||
# Setting users for home-manager.
|
|
||||||
home-manager.users = mapUsers (user: _:
|
|
||||||
let homeManagerUserModulePath = lib.getAttr user homeManagerUserModules;
|
|
||||||
in import homeManagerUserModulePath);
|
|
||||||
|
|
||||||
# NixOS users.
|
|
||||||
users.users = mapUsers (user: opts:
|
|
||||||
let
|
|
||||||
defaultUserConfig = {
|
|
||||||
extraGroups = [ "wheel" ];
|
|
||||||
createHome = true;
|
|
||||||
home = "/home/${user}";
|
|
||||||
};
|
|
||||||
# TODO: Effectively override the option.
|
|
||||||
# We assume all users set with this module are normal users.
|
|
||||||
absoluteOverrides = { isNormalUser = true; };
|
|
||||||
in defaultUserConfig // opts.settings // absoluteOverrides);
|
|
||||||
};
|
|
||||||
}
|
|
Loading…
Reference in New Issue
Block a user