36 lines
782 B
Nix
36 lines
782 B
Nix
{
|
|
pkgs,
|
|
identities,
|
|
primaryUser,
|
|
...
|
|
}:
|
|
{
|
|
users.users.${primaryUser} = {
|
|
uid = 1000;
|
|
isNormalUser = true;
|
|
extraGroups = [
|
|
"wheel"
|
|
"docker"
|
|
"kvm"
|
|
];
|
|
openssh.authorizedKeys.keys = identities.getAccessKeys { user = primaryUser; };
|
|
shell = pkgs.zsh;
|
|
linger = true; # Keep sshfs mounted even on logout.
|
|
};
|
|
|
|
virtualisation.docker.enable = true;
|
|
|
|
nixpkgs.config.allowUnfree = true;
|
|
|
|
programs.fuse.enable = true; # for ~/src/haremote mount
|
|
|
|
# For building RPi configs. Extra steps are handled by the host (nas).
|
|
# https://discuss.linuxcontainers.org/t/systemd-binfmt-service-is-masked/21566/4
|
|
boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
|
|
|
|
networking = {
|
|
hostName = "deimos";
|
|
domain = "home.arpa";
|
|
};
|
|
}
|