desktop deploy

justfile

@@ -62,8 +62,15 @@ deploy-factor hostname target='':
 
 tmp_dir := "/tmp/secrets/" + uuid()
 
+[group("deploy")]
+deploy hostname *ARGS:
+    nix run nixpkgs#nixos-rebuild -- \
+        --flake .#{{ hostname }} \
+        {{ ARGS }} switch
+
+
 [group('deploy')]
-deploy hostname target:
+deploy-remote hostname target:
     #!/usr/bin/env -S bash -e
     git add .
 

parts/modules/base/user.nix

@@ -9,16 +9,6 @@ with lib; let
   inherit (config.age) secrets;
 in {
   options.fireproof = {
-    username = lib.mkOption {
-      type = lib.types.str;
-      default = "nickolaj";
-      description = "The username of the user";
-    };
-    group = lib.mkOption {
-      type = lib.types.str;
-      default = "users";
-    };
-
     home-manager = lib.mkOption {
       type = options.home-manager.users.type.functor.wrapped;
     };
@@ -29,8 +19,8 @@ in {
     users.users.${username} = {
       isNormalUser = true;
       extraGroups = ["wheel"];
-      # initialPassword = "password";
+      initialPassword = "password";
-      hashedPasswordFile = secrets.hashed-user-password.path;
+      #hashedPasswordFile = secrets.hashed-user-password.path;
     };
 
     home-manager = {

parts/modules/hardware/yubikey.nix

@@ -0,0 +1,3 @@
+_: {
+  services.pcscd.enable = true;
+}

parts/modules/required.nix

@@ -9,5 +9,6 @@
     ./base/default-apps.nix
     ./dev/just.nix
     ./hardware/usb.nix
+    ./hardware/yubikey.nix
   ];
 }