add unprivileged user

1 files changed, 17 insertions, 0 deletions

diff --git a/modules/server/default.nix b/modules/server/default.nix
index 28292d8..319d0cc 100644
--- a/modules/server/default.nix
+++ b/modules/server/default.nix
@@ -5,4 +5,21 @@
   ];
 
   networking.firewall.enable = true;
+
+  # unpriviliged user
+  security.sudo.enable = true;
+  users.users.g = {
+    openssh.authorizedKeys.keys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHv82n6F6kwJ3/EMYlOoCc1/NaYFW7QHC5F8jKVzdlio gshipunov@toaster"
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA3to/h8Myn+zXAkjboaRVqOfmtDz7VpIHhHbaRoYyPX g.shipunov@uva.nl"
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICPPG1va3CG8uAXV+ACRFPdi8FicpdOyXqb7eSZJCPXx pixel"
+    ];
+    extraGroups = [
+      "wheel"
+    ];
+    group = "users";
+    home = "/home/g";
+    isNormalUser = true;
+    uid = 1000;
+  };
 }