1 files changed, 52 insertions, 15 deletions
diff --git a/modules/users.nix b/modules/users.nix
index e7fb228..a789580 100644
--- a/modules/users.nix
+++ b/modules/users.nix
@@ -11,21 +11,35 @@ in {
         home = "/home/orbekk";
         uid = 1000;
         description = "KJ";
-        extraGroups = ["wheel" "networkmanager" "dialout" "uucp" "audio" "pulse" "plugdev" "lxd" "readonly" "input" "vboxusers" "video" "sound" "tty" ];
-        openssh.authorizedKeys.keyFiles = [
-          ../data/yubikey_rsa.pub
+        extraGroups = [
+          "wheel"
+          "networkmanager"
+          "dialout"
+          "uucp"
+          "audio"
+          "pulse"
+          "plugdev"
+          "lxd"
+          "readonly"
+          "input"
+          "vboxusers"
+          "video"
+          "sound"
+          "tty"
+          "hledger"
         ];
+        openssh.authorizedKeys.keyFiles = [ ../data/yubikey_rsa.pub ];
       };
       guest = {
         isNormalUser = true;
         home = "/home/guest";
         uid = 1500;
         description = "Guest";
-        extraGroups = ["networkmanager" "audio" "pulse" "input"];
+        extraGroups = [ "networkmanager" "audio" "pulse" "input" ];
       };
       fcgi = {
         group = "fcgi";
-        extraGroups = ["readonly"];
+        extraGroups = [ "readonly" ];
         uid = 500;
         isSystemUser = true;
       };
@@ -48,7 +62,7 @@ in {
       minecraft = {
         name = "minecraft";
         uid = config.ids.uids.minecraft;
-        extraGroups = ["readonly"];
+        extraGroups = [ "readonly" ];
         isSystemUser = true;
       };
       stats = {
@@ -97,24 +111,47 @@ in {
       mpd = lib.mkIf config.services.mpd.enable {
         isSystemUser = true;
         group = "mpd";
-        extraGroups = ["readonly"];
+        extraGroups = [ "readonly" ];
       };
       nginx = lib.mkIf config.services.nginx.enable {
         isSystemUser = true;
-        extraGroups = ["readonly"]; 
+        extraGroups = [ "readonly" ];
+      };
+      hledger = lib.mkIf config.orbekk.hledger-web.enable {
+        isSystemUser = true;
+        home = "/var/lib/hledger-web";
+        group = "hledger";
       };
     };
     extraGroups = {
-      fcgi = { name = "fcgi"; gid = 500; };
-      plugdev = { name = "plugdev"; gid = 501; };
-      systemhttpd = { name = "systemhttpd"; gid = 502; };
-      linoquotes = { name = "linoquotes"; gid = 503; };
-      stats = { name = "stats"; gid = 504; };
-      terraria = { name = "terraria"; gid = 505; };
+      fcgi = {
+        name = "fcgi";
+        gid = 500;
+      };
+      plugdev = {
+        name = "plugdev";
+        gid = 501;
+      };
+      systemhttpd = {
+        name = "systemhttpd";
+        gid = 502;
+      };
+      linoquotes = {
+        name = "linoquotes";
+        gid = 503;
+      };
+      stats = {
+        name = "stats";
+        gid = 504;
+      };
+      terraria = {
+        name = "terraria";
+        gid = 505;
+      };
       readonly = { gid = 506; };
       pjournal = { gid = 507; };
       pjournal_test = { gid = 508; };
+      hledger = lib.mkIf config.orbekk.hledger-web.enable { };
     };
   };
 }
-