3 files changed, 101 insertions, 0 deletions

diff --git a/users/gkleen/authorized-keys/gkleen-sif.pub b/users/gkleen/authorized-keys/gkleen-sif.pub
new file mode 100644
index 00000000..e9aaf215
--- /dev/null
+++ b/users/gkleen/authorized-keys/gkleen-sif.pub
@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKrHPERae+OUTNOzNf9d2767ljFCm5hgmQw48Dj4RrlU gkleen@sif.midgard.yggdrasil
diff --git a/users/gkleen/default.nix b/users/gkleen/default.nix
new file mode 100644
index 00000000..c5ec7025
--- /dev/null
+++ b/users/gkleen/default.nix
@@ -0,0 +1,48 @@
+{ flake, userName, pkgs, customUtils, lib, ... }:
+{
+  imports = with flake.nixosModules.userProfiles.${userName}; [
+    zsh tmux utils direnv
+  ];
+  
+  users.users.${userName} = {
+    description = "Gregor Kleen";
+    extraGroups = [ "wheel" "networkmanager" "lp" "dialout" "audio" "video" "xmpp" "mail" "ssh" "vboxusers" "libvirtd" "wireshark" "games"];
+    group = "users";
+    uid = 1000;
+    createHome = true;
+    home = "/home/${userName}";
+    shell = "${pkgs.zsh}/bin/zsh";
+    isNormalUser = true;
+    openssh.authorizedKeys.keyFiles = let dir = ./authorized-keys; in lib.mapAttrsToList (n: _: dir + "/${n}") (builtins.readDir dir);
+    hashedPassword = "$6$rounds=500000$dOMgCU7DAk$yQFYGOURTEt12387LIYBnFKSWmtwXMUk1LJWnV0m7OFt.y2TnxQn2abdGA5dhwG9EmMB5wZGXf4J5F71c746C/";
+  };
+
+  home-manager.users.${userName} = {
+    programs = {
+      git = {
+        enable = true;
+        userEmail = "gkleen@yggdrasil.li";
+        userName = "Gregor Kleen";
+        delta.enable = true;
+        extraConfig = {
+          pull.rebase = false;
+          submodule.recurse = true;
+        };
+      };
+
+      ssh = {
+        enable = true;
+        controlMaster = "auto";
+        controlPersist = "30m";
+        serverAliveInterval = 6;
+        serverAliveCountMax = 10;
+        hashKnownHosts = true;
+        extraConfig = ''
+          IdentitiesOnly true
+        '';
+      };
+
+      gpg.enable = true;
+    };
+  };
+}
diff --git a/users/root.nix b/users/root.nix
new file mode 100644
index 00000000..be331141
--- /dev/null
+++ b/users/root.nix
@@ -0,0 +1,52 @@
+{ flake, lib, config, hostName, userName, pkgs, ... }:
+let
+  haveGKleen = flake.nixosModules.accounts ? "gkleen@${hostName}";
+in {
+  imports = with flake.nixosModules.userProfiles.${userName}; [
+    zsh tmux direnv utils
+  ];
+
+  users.users.${userName} = lib.mkIf haveGKleen {
+    inherit (config.users.users."gkleen") hashedPassword shell;
+    openssh.authorizedKeys.keyFiles = config.users.users."gkleen".openssh.authorizedKeys.keyFiles;
+  };
+
+  home-manager.users.${userName} = {
+    programs = {
+      git = {
+        enable = true;
+        userEmail = "gkleen@yggdrasil.li";
+        userName = "Gregor Kleen";
+        delta.enable = true;
+        extraConfig = {
+          pull.rebase = false;
+        };
+      };
+
+      ssh = {
+        enable = true;
+        controlMaster = "auto";
+        controlPersist = "30m";
+        serverAliveInterval = 6;
+        hashKnownHosts = true;
+        extraConfig = ''
+          IdentitiesOnly true
+          ServerAliveCountMax 10
+        '';
+      };
+
+      gpg.enable = true;
+    };
+
+    services = {
+      gpg-agent = {
+        enable = true;
+        enableSshSupport = true;
+        extraConfig = ''
+          pinentry-program ${pkgs.pinentry-curses}/bin/pinentry
+          grab
+        '';
+      };
+    };
+  };
+}