users: enable users per-host

common/users/default.nix

@@ -2,7 +2,7 @@
   imports = [
     ./qenya.nix
     ./randomcat.nix
-    ./richard.nix
+    ./trungle.nix
   ];
 
   users.mutableUsers = false;

common/users/qenya.nix

@@ -1,16 +1,28 @@
 { config, lib, pkgs, self, ... }:
 
-let keys = import ../../keys.nix;
-in {
+let
+  inherit (lib) mkIf mkEnableOption;
+  keys = import ../../keys.nix;
+  cfg = config.fountain.users.qenya;
+in
+{
+  options.fountain.users.qenya = {
+    enable = mkEnableOption "user qenya";
+  };
+
+  config = mkIf cfg.enable {
     users.users.qenya = {
+      uid = 1001;
       isNormalUser = true;
-    home = "/home/qenya";
+      group = "qenya";
       shell = pkgs.zsh;
       openssh.authorizedKeys.keys = keys.users.qenya;
-    uid = 1001;
     };
 
+    users.groups.qenya.gid = config.users.users.qenya.uid;
+
     programs.zsh.enable = true;
 
     home-manager.users."qenya" = self.homeManagerModules."qenya";
+  };
 }

common/users/randomcat.nix

@@ -1,12 +1,23 @@
 { config, lib, pkgs, ... }:
 
-let keys = import ../../keys.nix;
+let
+  inherit (lib) mkIf mkEnableOption;
+  keys = import ../../keys.nix;
+  cfg = config.fountain.users.randomcat;
 in
 {
+  options.fountain.users.randomcat = {
+    enable = mkEnableOption "user randomcat";
+  };
+
+  config = mkIf cfg.enable {
     users.users.randomcat = {
+      uid = 1000;
       isNormalUser = true;
-    home = "/home/randomcat";
+      group = "randomcat";
       openssh.authorizedKeys.keys = keys.users.randomcat;
-    uid = 1003;
+    };
+
+    users.groups.randomcat.gid = config.users.users.randomcat.uid;
   };
 }

common/users/richard.nix

@@ -1,12 +0,0 @@
-{ config, lib, pkgs, ... }:
-
-let keys = import ../../keys.nix;
-in
-{
-  users.users.richard = {
-    isNormalUser = true;
-    home = "/home/richard";
-    openssh.authorizedKeys.keys = keys.users.trungle;
-    uid = 1002;
-  };
-}

common/users/trungle.nix

@@ -0,0 +1,23 @@
+{ config, lib, pkgs, ... }:
+
+let
+  inherit (lib) mkIf mkEnableOption;
+  keys = import ../../keys.nix;
+  cfg = config.fountain.users.trungle;
+in
+{
+  options.fountain.users.trungle = {
+    enable = mkEnableOption "user trungle";
+  };
+
+  config = mkIf cfg.enable {
+    users.users.trungle = {
+      uid = 1002;
+      isNormalUser = true;
+      group = "trungle";
+      openssh.authorizedKeys.keys = keys.users.trungle;
+    };
+
+    users.groups.trungle.gid = config.users.users.trungle.uid;
+  };
+}

hosts/kalessin/default.nix

@@ -10,7 +10,11 @@
   networking.hostName = "kalessin";
   networking.hostId = "534b538e";
 
+  fountain.users.qenya.enable = true;
   users.users.qenya.extraGroups = [ "wheel" ];
+
+  fountain.users.trungle.enable = true;
+
   qenya.base-server.enable = true;
 
   system.stateVersion = "23.11";

hosts/kilgharrah/default.nix

@@ -25,6 +25,7 @@
 
   qenya.services.pipewire.lowLatency.enable = true;
 
+  fountain.users.qenya.enable = true;
   age.secrets.user-password-kilgharrah-qenya.file = ../../secrets/user-password-kilgharrah-qenya.age;
   users.users.qenya.hashedPasswordFile = config.age.secrets.user-password-kilgharrah-qenya.path;
   users.users.qenya.extraGroups = [ "wheel" ];

hosts/orm/default.nix

@@ -10,6 +10,7 @@
   networking.hostName = "orm";
   networking.hostId = "00000000";
 
+  fountain.users.qenya.enable = true;
   users.users.qenya.extraGroups = [ "wheel" ];
   qenya.base-server.enable = true;
 

hosts/tohru/default.nix

@@ -23,6 +23,7 @@
   console.keyMap = "uk";
   services.xserver.xkb.layout = "gb";
 
+  fountain.users.qenya.enable = true;
   age.secrets.user-password-tohru-qenya.file = ../../secrets/user-password-tohru-qenya.age;
   users.users.qenya.hashedPasswordFile = config.age.secrets.user-password-tohru-qenya.path;
   users.users.qenya.extraGroups = [

hosts/yevaud/default.nix

@@ -10,6 +10,7 @@
   networking.hostName = "yevaud";
   networking.hostId = "09673d65";
 
+  fountain.users.qenya.enable = true;
   users.users.qenya.extraGroups = [ "wheel" ];
   qenya.base-server.enable = true;