infra / users / users.nix

{
  users.users = {
    bates64 = {
      isNormalUser = true;
      extraGroups = [ "wheel" ];
      openssh.authorizedKeys.keyFiles = [ ./bates64.pub ];
    };
  };

  security.sudo.extraRules = [
    {
      users = [ "bates64" ];
      commands = [
        {
          command = "ALL";
          options = [ "NOPASSWD" ];
        }
      ];
    }
  ];

  nix.settings.trusted-users = [
    "root"
    "bates64"
  ];
}