Initial commit

m/masters/default.nix

@@ -0,0 +1,5 @@
+{
+  imports = [
+    ./nero.nix
+  ];
+}

m/masters/nero.nix

@@ -0,0 +1,38 @@
+{ lib, config, ... }:
+let
+  types = lib.types;
+  masters = config.maid.masters;
+  hm = config.maid.hm;
+
+  mkUser = name: {
+    enable = lib.mkEnableOption name;
+    override = lib.mkOption {
+      type = types.attrs;
+      default = {};
+    };
+  };
+in
+{
+  options.maid.masters = {
+    nero = mkUser "nero";
+  };
+
+  config = lib.mkIf masters.nero.enable {
+    sops.secrets."users/nero/passwordHash" = {
+      neededForUsers = true;
+      sopsFile = ../../secrets/users.yaml;
+    };
+
+    home-manager.users.nero = lib.mkIf hm.enable (import nero/home.nix);
+
+    users.users.nero = {
+      isNormalUser = true;
+      uid = 1337;
+      hashedPasswordFile = config.sops.secrets."users/nero/passwordHash".path;
+
+      openssh.authorizedKeys.keys = [
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBaWnT7mpLERhm3zIWglNy094a7F7d7cpEImLZYwwWoS nero@lil-maid"
+      ];
+    } // masters.nero.override;
+  };
+}

m/masters/nero/home.nix

@@ -0,0 +1,20 @@
+{ pkgs, ... }:
+{
+  imports = [];
+
+  home.username = "nero";
+  home.homeDirectory = "/home/nero";
+  home.stateVersion = "24.05";
+
+  home.file = {
+    ".cargo/config.toml" = {
+      text = ''
+        [net]
+        git-fetch-with-cli = true 
+
+        [target.x86_64-unknown-linux-gnu] 
+        rustflags = ["-C", "link-arg=--ld-path=${pkgs.mold}/bin/mold"]
+      '';
+    };
+  };
+}