From f244fec1faafed0362ec9de8897d99f830a3a20d Mon Sep 17 00:00:00 2001
From: Skullheadx <andrew@montgomery.systems>
Date: Mon, 20 Jul 2026 21:30:22 -0400
Subject: nixremote user setup

---
 hosts/icon/configuration.nix | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/hosts/icon/configuration.nix b/hosts/icon/configuration.nix
index 082d06f..03a7788 100644
--- a/hosts/icon/configuration.nix
+++ b/hosts/icon/configuration.nix
@@ -48,6 +48,7 @@
   };
 
   users.groups.git = {};
+  users.groups.nixremote = {};
   users.users.nginx.extraGroups = ["git"];
   systemd.services.nginx.serviceConfig = {
     SupplementaryGroups = ["git"];
@@ -87,8 +88,20 @@
         ../../pubkeys/work_laptop_ssh.pub
       ];
     };
+    nixremote = {
+      isSystemUser = true;
+      group = "nixremote";
+      home = "/home/nixremote";
+      createHome = true;
+      homeMode = "555";
+      openssh.authorizedKeys.keyFiles = [
+        ../../pubkeys/desktop_ssh.pub
+      ];
+    };
   };
 
+  nix.settings.trusted-users = ["root" "andrew" "nixremote" "@wheel"];
+
   services.cgit."cgit" = {
     enable = true;
     scanPath = "/srv/git";
-- 
cgit v1.3.1