refactor: mkHost load-all infrastructure and convert simple features
This commit is contained in:
@@ -1,13 +1,20 @@
|
||||
{
|
||||
nixos =
|
||||
{ config, user, ... }:
|
||||
{ config, lib, user, ... }:
|
||||
let
|
||||
cfg = config.features.remote-base;
|
||||
in
|
||||
{
|
||||
sops.secrets.user-password = {
|
||||
sopsFile = ../secrets/common.yaml;
|
||||
neededForUsers = true;
|
||||
};
|
||||
options.features.remote-base.enable = lib.mkEnableOption "remote-base";
|
||||
|
||||
users.mutableUsers = false;
|
||||
users.users.${user}.hashedPasswordFile = config.sops.secrets.user-password.path;
|
||||
config = lib.mkIf cfg.enable {
|
||||
sops.secrets.user-password = {
|
||||
sopsFile = ../secrets/common.yaml;
|
||||
neededForUsers = true;
|
||||
};
|
||||
|
||||
users.mutableUsers = false;
|
||||
users.users.${user}.hashedPasswordFile = config.sops.secrets.user-password.path;
|
||||
};
|
||||
};
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user