making a reduced permissions user for automation

1 files changed, 16 insertions, 0 deletions

diff --git a/modules/users/git.nix b/modules/users/git.nix
new file mode 100644
index 0000000..494f4b5
--- /dev/null
+++ b/modules/users/git.nix
@@ -0,0 +1,16 @@
+{ pkgs, ... }: {
+	users = {
+		mutableUsers = false;
+		users.git = {
+			isNormaluser = false;
+			description = "user for git and building automation";
+			extraGroups = [ "builders" ];
+
+			openssh.authorizedKeys.keys = [
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHslJRD5+7rytlVDzeZh6B/4XW8QWQ5dsWWDBbOXKTrJ defin@zenbook"
+			];
+		};
+	};
+
+	services.openssh = { settings.PasswordAuthenitcation = false; };
+}