makefu/nixos-config
1
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

wbob: use kiosk password for root user

Browse source
This commit is contained in:
makefu 2023-07-11 12:22:57 +02:00
parent 455fbc9207
commit 8df16c5ced
No known key found for this signature in database
GPG key ID: 36F7711F3FC0F225
3 changed files with 11 additions and 3 deletions
1systems/wbob
config.nix
2configs
gui
wbob-kiosk.nix
secrets
wbob-users.nix

4
1systems/wbob/config.nix
View file

@ -10,6 +10,7 @@ in {
# Include the results of the hardware scan.
./nuc
../../2configs/home-manager
../../2configs/support-nixos.nix
../../2configs/zsh-user.nix
@ -21,8 +22,9 @@ in {
# ../../2configs/virtualisation/libvirt.nix
# ../../2configs/virtualisation/virtualbox.nix
# ../../2configs/tinc/retiolum.nix
../../2configs/tinc/retiolum.nix
../../2configs/gui/wbob-kiosk.nix
../../2configs/secrets/wbob-users.nix
{ environment.systemPackages = with pkgs ;[
nano
guake

2
2configs/gui/wbob-kiosk.nix
View file

@ -4,14 +4,12 @@
imports = [
./base.nix
];
sops.secrets."passwd/kiosk".neededForUsers = true;
users.users.kiosk = {
packages = with pkgs;[ chromium vscode spotify tartube-yt-dlp ];
group = "kiosk";
isNormalUser = true;
uid = 1003;
passwordFile = config.sops.secrets."passwd/kiosk".path;
extraGroups = [ "wheel" "audio" "pulse" "pipewire" ];
};
users.groups.kiosk.gid = 989 ;

8
2configs/secrets/wbob-users.nix Normal file
View file

@ -0,0 +1,8 @@
{ config, lib, ... }:
{
sops.secrets."passwd/kiosk".neededForUsers = true;
users.users.kiosk.passwordFile = config.sops.secrets."passwd/kiosk".path;
# override the password for root@wbob to the kiosk password
users.users.root.passwordFile = lib.mkForce config.sops.secrets."passwd/kiosk".path;
}