users: define extraGroups per-host

common/default.nix

@@ -3,6 +3,7 @@
     ./sysadmin
     ./users
     ./environment.nix
+    ./home-manager.nix
     ./nginx.nix
     ./openssh.nix
     ./security.nix

common/home-manager.nix

@@ -0,0 +1,18 @@
+{ config, lib, pkgs, ... }:
+
+{
+  home-manager = {
+    useUserPackages = true;
+    useGlobalPkgs = true;
+
+    users = {
+      qenya = { config, lib, pkgs, osConfig, ... }: {
+        home.homeDirectory = osConfig.users.users.qenya.home;
+
+        imports = [
+          ../home/qenya
+        ];
+      };
+    };
+  };
+}

common/users/qenya.nix

@@ -5,21 +5,8 @@ in {
   users.users.qenya = {
     isNormalUser = true;
     home = "/home/qenya";
-    extraGroups = [
-      "wheel" # sudo
-      "networkmanager" # UI wifi configuration
-      "dialout" # access to serial ports
-    ];
     shell = pkgs.zsh;
     openssh.authorizedKeys.keys = keys.users.qenya;
     uid = 1001;
   };
-
-  home-manager.users.qenya = { config, lib, pkgs, osConfig, ... }: {
-    home.homeDirectory = osConfig.users.users.qenya.home;
-
-    imports = [
-      ../../home
-    ];
-  };
 }

flake.nix

@@ -47,11 +47,6 @@
           overlays = [ nur.overlay ];
         };
 
-        home-manager = {
-          useUserPackages = true;
-          useGlobalPkgs = true;
-        };
-
         imports = [
           home-manager.nixosModules.home-manager
           nur.nixosModules.nur

hosts/kalessin/configuration.nix

@@ -8,6 +8,7 @@
   boot.loader.systemd-boot.enable = true;
   boot.loader.efi.canTouchEfiVariables = true;
 
+  users.users.qenya.extraGroups = [ "wheel" ];
   qenya.sysadmin.enable = true;
 
   system.stateVersion = "23.11";

hosts/orm/configuration.nix

@@ -8,6 +8,7 @@
   boot.loader.systemd-boot.enable = true;
   boot.loader.efi.canTouchEfiVariables = true;
   
+  users.users.qenya.extraGroups = [ "wheel" ];
   qenya.sysadmin.enable = true;
 
   age.secrets.wireguard-peer-orm.file = ../../secrets/wireguard-peer-orm.age;

hosts/tohru/configuration.nix

@@ -43,6 +43,12 @@
   sound.enable = true;
   hardware.pulseaudio.enable = true;
 
+  users.users.qenya.extraGroups = [
+    "wheel" # sudo
+    "networkmanager" # UI wifi configuration
+    "dialout" # access to serial ports
+  ];
+
   # USB drives
   boot.supportedFilesystems = [ "ntfs" ];
 

hosts/yevaud/configuration.nix

@@ -8,6 +8,8 @@
   boot.loader.systemd-boot.enable = true;
   boot.loader.efi.canTouchEfiVariables = true;
 
+  users.users.qenya.extraGroups = [ "wheel" ];
+
   qenya.sysadmin.enable = true;
 
   age.secrets.wireguard-peer-yevaud.file = ../../secrets/wireguard-peer-yevaud.age;