levanter/configuration.nix

   1 { device, hostname, ayo_public_key, ... }: {
   2         imports = [
   3                 ./hardware-configuration.nix
   4                 ./disko.nix
   5                 ./komuhn-website.nix
   6                 ./git-server.nix
   7         ];
   8
   9         boot.loader.grub = {
  10                 enable = true;
  11                 inherit device;
  12         };
  13
  14         networking.hostName = hostname;
  15
  16         security.pam = {
  17                 sshAgentAuth.enable = true;
  18                 services."sudo".sshAgentAuth = true;
  19         };
  20
  21         services.openssh.enable = true;
  22
  23         users = {
  24                 mutableUsers = false;
  25
  26                 users."ayo" = {
  27                         isNormalUser = true;
  28                         extraGroups = [ "wheel" ];
  29                         openssh.authorizedKeys.keys = [ ayo_public_key ];
  30                 };
  31         };
  32
  33         system.stateVersion = "26.05";
  34         nix.settings.trusted-users = [ "ayo" ];
  35 }