users: define extraGroups per-host

This commit is contained in:
Katherina Walshe-Grey 2024-08-29 17:56:13 +01:00
parent f5191640f5
commit 66cc74e388
5 changed files with 12 additions and 7 deletions

View file

@ -5,11 +5,6 @@ in {
users.users.qenya = { users.users.qenya = {
isNormalUser = true; isNormalUser = true;
home = "/home/qenya"; home = "/home/qenya";
extraGroups = [
"wheel" # sudo
"networkmanager" # UI wifi configuration
"dialout" # access to serial ports
];
shell = pkgs.zsh; shell = pkgs.zsh;
openssh.authorizedKeys.keys = keys.users.qenya; openssh.authorizedKeys.keys = keys.users.qenya;
uid = 1001; uid = 1001;

View file

@ -8,6 +8,7 @@
boot.loader.systemd-boot.enable = true; boot.loader.systemd-boot.enable = true;
boot.loader.efi.canTouchEfiVariables = true; boot.loader.efi.canTouchEfiVariables = true;
users.users.qenya.extraGroups = [ "wheel" ];
qenya.sysadmin.enable = true; qenya.sysadmin.enable = true;
system.stateVersion = "23.11"; system.stateVersion = "23.11";

View file

@ -8,6 +8,7 @@
boot.loader.systemd-boot.enable = true; boot.loader.systemd-boot.enable = true;
boot.loader.efi.canTouchEfiVariables = true; boot.loader.efi.canTouchEfiVariables = true;
users.users.qenya.extraGroups = [ "wheel" ];
qenya.sysadmin.enable = true; qenya.sysadmin.enable = true;
age.secrets.wireguard-peer-orm.file = ../../secrets/wireguard-peer-orm.age; age.secrets.wireguard-peer-orm.file = ../../secrets/wireguard-peer-orm.age;

View file

@ -43,6 +43,12 @@
sound.enable = true; sound.enable = true;
hardware.pulseaudio.enable = true; hardware.pulseaudio.enable = true;
users.users.qenya.extraGroups = [
"wheel" # sudo
"networkmanager" # UI wifi configuration
"dialout" # access to serial ports
];
# USB drives # USB drives
boot.supportedFilesystems = [ "ntfs" ]; boot.supportedFilesystems = [ "ntfs" ];

View file

@ -8,6 +8,8 @@
boot.loader.systemd-boot.enable = true; boot.loader.systemd-boot.enable = true;
boot.loader.efi.canTouchEfiVariables = true; boot.loader.efi.canTouchEfiVariables = true;
users.users.qenya.extraGroups = [ "wheel" ];
qenya.sysadmin.enable = true; qenya.sysadmin.enable = true;
age.secrets.wireguard-peer-yevaud.file = ../../secrets/wireguard-peer-yevaud.age; age.secrets.wireguard-peer-yevaud.file = ../../secrets/wireguard-peer-yevaud.age;