diff --git a/modules/nixos/users/mediamanager/default.nix b/modules/nixos/users/mediamanager/default.nix deleted file mode 100644 index 733c8e0..0000000 --- a/modules/nixos/users/mediamanager/default.nix +++ /dev/null @@ -1,43 +0,0 @@ -{ - lib, - pkgs, - inputs, - namespace, - system, - target, - format, - virtual, - systems, - config, - ... -}: -with lib; -with lib.${namespace}; let - username = "mediamanager"; - admin = false; - extraGroups = ["mediamanager"]; - trustedSshKeys = [ - #KK - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF1gj+j+09T8n2HjpBod13WGroWn1cLmNUDmQfGVZllM kylekrein@fleetcarrier" - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPx+q1QnVnF/bG02Q8eBjwKEX9li2ZrsJmmN+N/7Sl5Z kylekrein@anaconda" - #A - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICTZaLuOuuoeaYOuXH0KTe91X5nFfUvve3305ADajnvj alidrisel@localhost.localdomain" - ]; - - cfg = config.${namespace}.users.${username}; -in { - options.${namespace}.users.${username} = with types; { - enable = mkBoolOpt false "Enable ${username} user"; - config = mkOpt types.attrs {} "Additional home manager config for ${username}"; - }; - - config = mkUser { - inherit config; - inherit (cfg) enable; - homeConfig = cfg.config; - inherit username; - inherit admin; - inherit extraGroups; - inherit trustedSshKeys; - }; -} diff --git a/systems/x86_64-linux/stargate/default.nix b/systems/x86_64-linux/stargate/default.nix index 392c27d..6a9a210 100644 --- a/systems/x86_64-linux/stargate/default.nix +++ b/systems/x86_64-linux/stargate/default.nix @@ -140,10 +140,22 @@ in { config = {}; }; users.groups.mediamanager = {}; - custom.users.mediamanager = { - enable = true; - config = {}; + snowfallorg.users.mediamanager = { + create = true; + admin = false; + home = { + enable = false; + }; }; + users.users.mediamanager = { + extraGroups = ["mediamanager"]; + hashedPassword = "!"; + openssh.authorizedKeys.keys = config.users.users.kylekrein.openssh.authorizedKeys.keys ++ + [ + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICTZaLuOuuoeaYOuXH0KTe91X5nFfUvve3305ADajnvj alidrisel@localhost.localdomain" + ]; + }; + systemd.tmpfiles.rules = ["d ${persist}/home/${username} 0700 mediamanager users -"]; # /persist/home/ created, owned by that user networking.firewall.allowedTCPPorts = [80 443 22]; # ======================== DO NOT CHANGE THIS ======================== system.stateVersion = "25.05";