125 lines
3.7 KiB
Nix
125 lines
3.7 KiB
Nix
# hosts/common/users/m3tam3re.nix — Central user definition with m3ta-home integration.
|
|
#
|
|
# This module:
|
|
# 1. Creates the m3tam3re NixOS user
|
|
# 2. Loads the m3ta-home profile system via mkHome
|
|
# 3. Sets per-host feature flags based on a host profile mapping
|
|
# 4. Imports per-host home.nix overrides (monitors, HW-specific config)
|
|
#
|
|
# To add a new host:
|
|
# 1. Add entry to hostProfiles below
|
|
# 2. Add feature flags in the hostFlags section
|
|
# 3. Create hosts/<hostname>/home.nix if the host needs overrides (monitors, etc.)
|
|
{
|
|
config,
|
|
pkgs,
|
|
inputs,
|
|
...
|
|
}: let
|
|
hostname = config.networking.hostName;
|
|
|
|
# ── Per-host profile mapping ──
|
|
# Determines which m3ta-home context and sets each host gets.
|
|
hostProfiles = {
|
|
# ── Server hosts ──
|
|
AZ-CLD-1 = {
|
|
context = "server";
|
|
sets = [];
|
|
};
|
|
AZ-PRM-1 = {
|
|
context = "server";
|
|
sets = [];
|
|
};
|
|
};
|
|
|
|
profile =
|
|
hostProfiles.${
|
|
hostname
|
|
} or {
|
|
context = "server";
|
|
sets = [];
|
|
};
|
|
m3ta-lib = inputs.m3ta-home.lib;
|
|
|
|
# Check if a per-host home.nix exists
|
|
hostHomeFile = ./../../${hostname}/home.nix;
|
|
hostHomeExists = builtins.pathExists hostHomeFile;
|
|
|
|
# ── Per-host feature flags ──
|
|
# These enable/disable specific m3ta-home modules per host.
|
|
hostFlags =
|
|
if hostname == "AZ-CLD-1"
|
|
then {
|
|
# Full desktop workstation
|
|
base = {
|
|
shell = {
|
|
fish.enable = true;
|
|
nushell.enable = true;
|
|
starship.enable = true;
|
|
};
|
|
cliTools = {
|
|
fzf.enable = true;
|
|
nitch.enable = true;
|
|
television.enable = true;
|
|
};
|
|
secrets.enable = false;
|
|
};
|
|
}
|
|
else {
|
|
base = {
|
|
shell = {
|
|
fish.enable = true;
|
|
starship.enable = true;
|
|
};
|
|
cliTools = {
|
|
fzf.enable = true;
|
|
nitch.enable = true;
|
|
};
|
|
};
|
|
};
|
|
in {
|
|
# ── NixOS user definition ──
|
|
users.users."sascha.koenig" = {
|
|
hashedPassword = "$y$j9T$ORX4btVZgs9Xjq2oIvzJm0$lXiPwaa0D6t.eMDIx1UBesEAMOkWXBoGwpeI7X0aS8D";
|
|
isNormalUser = true;
|
|
shell = pkgs.nushell;
|
|
extraGroups = [
|
|
"wheel"
|
|
"networkmanager"
|
|
"libvirtd"
|
|
"flatpak"
|
|
"plugdev"
|
|
"input"
|
|
"kvm"
|
|
"qemu-libvirtd"
|
|
];
|
|
openssh.authorizedKeys.keys = [
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEZbg/Z9mnflXuLahGY8WOSBMqbgeqVIkIwRkquys1Ml sascha.koenig@azintec.com"
|
|
"ssh-rsa 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 m3tam3re@MBP-Sascha.fritz.box"
|
|
];
|
|
packages = [inputs.home-manager.packages.${pkgs.stdenv.hostPlatform.system}.default];
|
|
};
|
|
|
|
# ── Home-Manager configuration via m3ta-home ──
|
|
home-manager.users."sascha.koenig" = {
|
|
home.stateVersion = "25.11";
|
|
imports =
|
|
[
|
|
# Load m3ta-home composition engine
|
|
(m3ta-lib.mkHome {
|
|
user = "m3tam3re";
|
|
identity = "work";
|
|
inherit (profile) context sets;
|
|
})
|
|
# Per-host feature flags
|
|
hostFlags
|
|
]
|
|
# Per-host home.nix (Hyprland monitors, XDG/MIME, HW-specific overrides)
|
|
++ (
|
|
if hostHomeExists
|
|
then [hostHomeFile]
|
|
else []
|
|
);
|
|
};
|
|
}
|