summaryrefslogtreecommitdiff
path: root/modules/nixos/profiles/server.nix
diff options
context:
space:
mode:
Diffstat (limited to 'modules/nixos/profiles/server.nix')
-rw-r--r--modules/nixos/profiles/server.nix18
1 files changed, 8 insertions, 10 deletions
diff --git a/modules/nixos/profiles/server.nix b/modules/nixos/profiles/server.nix
index d54285d..8934863 100644
--- a/modules/nixos/profiles/server.nix
+++ b/modules/nixos/profiles/server.nix
@@ -18,10 +18,6 @@ in
{
options.profiles.server = {
enable = lib.mkEnableOption "the Server profile";
-
- hostUser = lib.mkEnableOption "a default interactive user" // {
- default = true;
- };
};
config = lib.mkIf cfg.enable (
@@ -36,6 +32,10 @@ in
boot.tmp.cleanOnBoot = lib.mkDefault true;
+ borealis.users = {
+ system.enable = true;
+ };
+
# We don't need it here
documentation.enable = false;
@@ -65,17 +65,15 @@ in
secrets.enable = true;
};
+ # I use exclusively Tailscale auth on some machines
+ users.allowNoPasswordLogin = true;
+
zramSwap.enable = true;
}
- (lib.mkIf cfg.hostUser {
+ (lib.mkIf config.borealis.users.system.enable {
# Hardening access to `nix` as no other users *should* ever really touch it
nix.settings.allowed-users = [ config.networking.hostName ];
-
- users.users.${config.networking.hostName} = {
- isNormalUser = true;
- extraGroups = [ "wheel" ];
- };
})
]
);