21 lines
473 B
Nix
21 lines
473 B
Nix
{ config
|
|
, pkgs
|
|
, lib
|
|
, ...
|
|
}:
|
|
let
|
|
keys = import ../../../variables/keys.nix;
|
|
inherit (pkgs.callPackage ../../lib/default.nix { }) mkUser;
|
|
in
|
|
{
|
|
users.extraUsers.steveej2 = mkUser {
|
|
uid = 1001;
|
|
openssh.authorizedKeys.keys = keys.users.steveej.openssh;
|
|
hashedPasswordFile = config.sops.secrets.sharedUsers-steveej.path;
|
|
};
|
|
|
|
nix.settings.trusted-users = [ "steveej" ];
|
|
|
|
security.pam.u2f.enable = true;
|
|
security.pam.services.steveej.u2fAuth = true;
|
|
}
|