summaryrefslogtreecommitdiff
path: root/modules/nixos/base/users.nix
diff options
context:
space:
mode:
Diffstat (limited to 'modules/nixos/base/users.nix')
-rw-r--r--modules/nixos/base/users.nix58
1 files changed, 0 insertions, 58 deletions
diff --git a/modules/nixos/base/users.nix b/modules/nixos/base/users.nix
deleted file mode 100644
index b757fc5..0000000
--- a/modules/nixos/base/users.nix
+++ /dev/null
@@ -1,58 +0,0 @@
-{
- config,
- lib,
- pkgs,
- secretsDir,
- ...
-}:
-let
- cfg = config.base.users;
-in
-{
- options.base.users = {
- enable = lib.mkEnableOption "basic user configurations" // {
- default = config.base.enable;
- defaultText = lib.literalExpression "config.base.enable";
- };
-
- defaultRoot = {
- enable = lib.mkEnableOption "default root user configuration" // {
- default = false;
- };
-
- manageSecrets = lib.mkEnableOption "automatic management of secrets" // {
- default = config.traits.secrets.enable;
- defaultText = lib.literalExpression "config.traits.secrets.enable";
- };
- };
- };
-
- config = lib.mkIf cfg.enable (
- lib.mkMerge [
- {
- users = {
- defaultUserShell = pkgs.bash;
- mutableUsers = false;
- };
- }
-
- (lib.mkIf cfg.defaultRoot.enable {
- users.users.root = {
- home = lib.mkDefault "/root";
- uid = lib.mkDefault config.ids.uids.root;
- group = lib.mkDefault "root";
- };
- })
-
- (lib.mkIf (cfg.defaultRoot.enable && cfg.defaultRoot.manageSecrets) {
- age.secrets = {
- rootPassword.file = secretsDir + "/rootPassword.age";
- };
-
- users.users.root = {
- hashedPasswordFile = config.age.secrets.rootPassword.path;
- };
- })
- ]
- );
-}