forked from Bos55/nix-config
Tibo De Peuter
1c437333f3
Migrated authorized SSH keys and personal metadata (emails, tokens) to sops-nix to prevent infrastructure fingerprinting. Introduced centralized secrets module with placeholder fallbacks.
20 lines
466 B
Nix
20 lines
466 B
Nix
{ config, lib, ... }:
|
|
|
|
let
|
|
cfg = config.homelab.users.backup;
|
|
in {
|
|
options.homelab.users.backup.enable = lib.mkEnableOption "user Backup";
|
|
|
|
config = lib.mkIf cfg.enable {
|
|
users.users.backup = {
|
|
description = "Backup User";
|
|
isNormalUser = true;
|
|
extraGroups = [
|
|
"docker" # Allow access to the docker socket.
|
|
];
|
|
openssh.authorizedKeys.keyFiles = [
|
|
config.sops.secrets.user_keys_backup.path
|
|
];
|
|
};
|
|
};
|
|
}
|