user.nix

{...}: rec {
  mkConfig = pkgs: username: {
    userConfig,
    extraPackages ? _pkgs: [],
    stateVersion ? "21.05",
    homeDirectory ? "/home/${username}",
  }: {
    phil = userConfig;

    home = {
      inherit username homeDirectory stateVersion;

      sessionVariables = {
        MOZ_USE_XINPUT2 = 1;
        GTK_USE_PORTAL = 1;
        AWT_TOOLKIT = "MToolkit";
      };

      packages = extraPackages pkgs;
    };

    programs.home-manager.enable = true;
    #programs.zathura.enable = true;
    #services.syncthing.enable = true;

    xdg = {
      enable = true;
      configHome = "${homeDirectory}/.config";
      dataHome = "${homeDirectory}/.local/share";
      cacheHome = "${homeDirectory}/.cache";
    };

    imports = [../modules/users];
  };

  mkSystemUser = {
    name,
    uid ? null,
    extraGroups ? ["wheel" "video" "audio" "docker" "media" "dialout" "adbusers" "gpio" "fuse" "libvirtd" "nginx"],
    sshKeys ? [
      # yubikey
      "ssh-rsa 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 cardno:000614321676"
      # yubikey backup
      "ssh-rsa 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 openpgp:0x18E2D343"
      # nix remote building
      "ssh-rsa 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 maelstroem@epsilon"
    ],
    ...
  }:
    mkUser {inherit uid name extraGroups sshKeys;};

  mkGuestUser = mkUser;

  mkUser = {
    name,
    uid,
    extraGroups ? [],
    sshKeys ? [],
  }: ({pkgs, ...}: {
    users.users."${name}" = let
      defaultGroups = ["video" "audio" "cdrom" "fuse"];
    in {
      inherit name uid;
      shell = pkgs.fish;
      extraGroups = extraGroups ++ defaultGroups;
      isNormalUser = true;
      isSystemUser = false;
      openssh.authorizedKeys.keys = sshKeys;
    };
  });
}