teml

modules/nixos/user/default.nix

@@ -36,6 +36,11 @@ in
       default = "matt";
       description = "The name to use for the user account.";
     };
+    passwordFile = lib.mkOption {
+      type = nullOr path;
+      default = null;
+      description = "Path to the password file for this user account";
+    };
   };
 
   config = {
@@ -44,6 +49,10 @@ in
 
       extraGroups = [
         "wheel"
+        "keys"
+        "networkmanager"
+        "ratbagd"
+        "scanner"
         "systemd-journal"
         "mpd"
         "audio"
@@ -54,13 +63,15 @@ in
         "tss"
         "power"
         "nix"
+        "i2c"
       ] ++ cfg.extraGroups;
 
       group = "users";
       home = "/home/${cfg.name}";
       isNormalUser = true;
-      shell = lib.mkDefault pkgs.zsh;
+      shell = lib.mkForce pkgs.zsh;
       uid = 1000;
+      hashedPasswordFile = cfg.passwordFile;
     } // cfg.extraOptions;
   };
 }