forked from Bos55/nix-config
Tibo De Peuter
17c5d0ee48
Migrated authorized SSH keys and personal metadata (emails, tokens) to sops-nix to prevent infrastructure fingerprinting. Introduced centralized secrets module with placeholder fallbacks.
28 lines
739 B
Nix
28 lines
739 B
Nix
{ self, nixpkgs, system, ... }:
|
|
|
|
let
|
|
pkgs = nixpkgs.legacyPackages.${system};
|
|
in
|
|
pkgs.nixosTest {
|
|
name = "deploy-user-test";
|
|
nodes = {
|
|
machine = { ... }: {
|
|
imports = [
|
|
../modules
|
|
../users
|
|
];
|
|
homelab.users.deploy.enable = true;
|
|
system.stateVersion = "24.11"; # Match the current nixpkgs version
|
|
};
|
|
};
|
|
|
|
testScript = ''
|
|
machine.wait_for_unit("multi-user.target")
|
|
# Verify user exists
|
|
machine.succeed("id deploy")
|
|
# Verify we can run nix-env as deploy via sudo
|
|
machine.succeed("sudo -u deploy -n nix-env --version")
|
|
# Verify switch-to-configuration is accessible (it's added to path by the module)
|
|
machine.succeed("whereis switch-to-configuration")
|
|
'';
|
|
}
|