devos/profiles/peerix/default.nix
2022-06-18 00:07:23 +02:00

24 lines
535 B
Nix

{config, pkgs, ...}:
let
peerix_user = "peerix";
in
{
users.groups.${peerix_user} = {};
users.users.${peerix_user} = {
group = peerix_user;
isSystemUser = true;
};
age.secrets.binary-cache-secret = {
owner = peerix_user;
file = ../../secrets/binary-cache-secret.age;
};
services.peerix = {
enable = true;
package = pkgs.peerix;
user = peerix_user;
privateKeyFile = config.age.secrets.binary-cache-secret.path;
publicKey = (builtins.readFile ../../secrets/binary-cache-pub);
};
}