From 6fa0b2f154620cf8da209320865ac4a20e83b9ae Mon Sep 17 00:00:00 2001 From: Seth Flynn Date: Thu, 13 Feb 2025 20:10:29 -0500 Subject: nixos+darwin: make separate user modules --- modules/nixos/users/seth.nix | 31 +++++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) create mode 100644 modules/nixos/users/seth.nix (limited to 'modules/nixos/users/seth.nix') diff --git a/modules/nixos/users/seth.nix b/modules/nixos/users/seth.nix new file mode 100644 index 0000000..34ec8ee --- /dev/null +++ b/modules/nixos/users/seth.nix @@ -0,0 +1,31 @@ +{ + config, + lib, + secretsDir, + ... +}: + +let + cfg = config.borealis.users.seth; +in + +{ + options.borealis.users.seth = { + manageSecrets = lib.mkEnableOption "automatic management of secrets" // { + default = config.traits.secrets.enable; + defaultText = lib.literalExpression "config.traits.secrets.enable"; + }; + }; + + config = lib.mkMerge [ + (lib.mkIf (cfg.enable && cfg.manageSecrets) { + age.secrets = { + sethPassword.file = secretsDir + "/sethPassword.age"; + }; + + users.users.seth = { + hashedPasswordFile = lib.mkDefault config.age.secrets.sethPassword.path; + }; + }) + ]; +} -- cgit v1.2.3