profile: no extra user groups on server

Signed-off-by: Michal Minář <[email protected]>
michojel · Oct 20, 2024 · 52779fc · 52779fc
1 parent 4be790d
commit 52779fc
Show file tree

Hide file tree

Showing 2 changed files with 23 additions and 17 deletions.
diff --git a/common/docker.nix b/common/docker.nix
@@ -1,5 +1,8 @@
 { config, lib, pkgs, ... }:
 
+let
+  cfg = config.profile;
+in
 {
   virtualisation.docker = {
     autoPrune.enable = true;
@@ -14,7 +17,7 @@
   ];
 
   users.users."${config.local.username}" = {
-    extraGroups = pkgs.lib.mkAfter [ "docker" ];
+    extraGroups = pkgs.lib.optional (!cfg.server.enable) (pkgs.lib.mkAfter [ "docker" ]);
   };
 
   environment.etc."docker/daemon.json" = {

diff --git a/common/profile.nix b/common/profile.nix
@@ -67,22 +67,25 @@ in
       "${cfgLocal.username}" = {
         isNormalUser = true;
         uid = 1000;
-        extraGroups = lib.mkAfter [
-          "audio"
-          "cdrom"
-          "docker"
-          "fuse"
-          "i2c"
-          "jackaudio"
-          "libvirtd"
-          "networkmanager"
-          "openrazer"
-          "plugdev"
-          "utmp"
-          "vboxusers"
-          "video"
-          "wheel"
-        ];
+        extraGroups = lib.mkAfter
+          ([
+            "fuse"
+            "wheel"
+          ]
+          ++ (lib.optional (!cfg.server.enable) [
+            "audio"
+            "cdrom"
+            "docker"
+            "i2c"
+            "jackaudio"
+            "libvirtd"
+            "networkmanager"
+            "openrazer"
+            "plugdev"
+            "utmp"
+            "vboxusers"
+            "video"
+          ]));
         shell = pkgs.bashInteractive;
       };
     };