move users to depot, add gitignore

1 files changed, 42 insertions, 2 deletions

diff --git a/machines/xnet/default.nix b/machines/xnet/default.nix
index 578db03..138bd53 100644
--- a/machines/xnet/default.nix
+++ b/machines/xnet/default.nix
@@ -1,11 +1,10 @@
-{ lib, ... }:
+{ pkgs, lib, ... }:
 let
   inherit (lib) mkDefault;
 in
 {
   imports = [
     ./disk.nix
-    ./users.nix
     ./nginx.nix
     ./persist.nix
     ./net
@@ -36,4 +35,45 @@ in
     doc.enable = mkDefault false;
     info.enable = mkDefault false;
   };
+
+  users.mutableUsers = false;
+
+  security.sudo = {
+    execWheelOnly = true;
+    extraConfig = "Defaults lecture = never";
+  };
+
+  programs.ssh = {
+    knownHosts = {
+      "github.com".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMqqnkVzrm0SdG6UOoqKLsabgH5C9okWi0dh2l9GKJl";
+      "gitlab.com".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAfuCHKVTjquxvt6CM6tdG4SLp1Btn/nOeHHE5UOzRdf";
+      "git.sr.ht".publicKey = " ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMZvRd4EtM7R+IHVMWmDkVU3VLQTSwQDSAvW0t2Tkj60";
+      "pascal.ee.ryerson.ca".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFmWInQNT6EoU1NtUYzTs5jtpfbO/m6yvCckOiEGjvDc";
+    };
+    extraConfig = ''
+      Host github
+        HostName github.com
+        User git
+        PreferredAuthentications publickey
+
+      Host ee
+        HostName pascal.ee.ryerson.ca
+        User kbujari
+    '';
+  };
+
+  programs.git = {
+    enable = true;
+    config = {
+      init.defaultBranch = "master";
+      fetch.prune = true;
+      core.excludesFile = pkgs.writeText "gitignore" ''
+        # dev shell caching
+        .direnv/
+        .envrc
+      '';
+      push.default = "upstream";
+      push.autoSetupRemote = true;
+    };
+  };
 }