separate groups and himalaya

modules/desktop/i3.nix

@@ -1,5 +1,8 @@
 { pkgs, ... }: {
 
+  # Requires Xorg to work
+  imports = [ ./xorg.nix ];
+
   services.xserver.windowManager = { i3 = { enable = true; }; };
 
   environment.systemPackages = with pkgs; [

modules/hardware/monitors.nix

@@ -1,4 +1,4 @@
-{ pkgs, ... }: {
+{ pkgs, user, ... }: {
 
   # Timezone required for Redshift schedule
   imports = [ ../system/timezone.nix ];
@@ -20,6 +20,9 @@
   # Detect monitors (brightness)
   hardware.i2c.enable = true;
 
+  # Grant user access to external monitors
+  users.users.${user}.extraGroups = [ "i2c" ];
+
   services.xserver.displayManager = {
 
     # Put the login screen on the left monitor

modules/mail/himalaya.nix

@@ -0,0 +1,28 @@
+{ pkgs, lib, user, ... }: {
+
+  home-manager.users.${user} = {
+
+    home.packages = with pkgs; [ himalaya ];
+
+    programs.himalaya = {
+      enable = true;
+      settings = {
+        name = "${name}";
+        downloads-dir = "~/Downloads";
+        home = {
+          default = true;
+          email = "censored";
+          imap-host = "censored";
+          imap-port = 993;
+          imap-login = "censored";
+          imap-passwd-cmd = "cat ~/.config/himalaya/passwd";
+          smtp-host = "censored";
+          smtp-port = 587;
+          smtp-login = "censored";
+          smtp-passwd-cmd = "cat ~/.config/himalaya/passwd";
+        };
+      };
+    };
+  };
+}
+

modules/system/doas.nix

@@ -1,28 +1,26 @@
 # Replace sudo with doas
 
-{ config, ... }: {
+{ ... }: {
 
-  config = {
+  security = {
-    security = {
 
-      # Remove sudo
+    # Remove sudo
-      sudo.enable = false;
+    sudo.enable = false;
 
-      # Add doas
+    # Add doas
-      doas = {
+    doas = {
-        enable = true;
+      enable = true;
 
-        # No password required
+      # No password required
-        wheelNeedsPassword = false;
+      wheelNeedsPassword = false;
 
-        # Pass environment variables from user to root
+      # Pass environment variables from user to root
-        # Also requires removing password here
+      # Also requires removing password here
-        extraRules = [{
+      extraRules = [{
-          groups = [ "wheel" ];
+        groups = [ "wheel" ];
-          noPass = true;
+        noPass = true;
-          keepEnv = true;
+        keepEnv = true;
-        }];
+      }];
-      };
     };
   };
 }

modules/system/user.nix

@@ -9,10 +9,8 @@
     # Automatically create a password to start
     initialPassword = "changeme";
 
-    # Enable sudo privileges
     extraGroups = [
       "wheel" # Sudo privileges
-      "i2c" # Access to external monitors
     ];
 
   };

nixos/home.nix

@@ -5,7 +5,6 @@
 
     home.packages = with pkgs; [
       # neomutt
-      himalaya # Email
       qbittorrent
 
       # Encryption
@@ -19,25 +18,5 @@
       NOTES_PATH = "$HOME/dev/personal/notes";
     };
 
-    # Email
-    # programs.himalaya = {
-    # enable = true;
-    # settings = {
-    # name = "${name}";
-    # downloads-dir = "~/Downloads";
-    # home = {
-    # default = true;
-    # email = "censored";
-    # imap-host = "censored";
-    # imap-port = 993;
-    # imap-login = "censored";
-    # imap-passwd-cmd = "cat ~/.config/himalaya/passwd";
-    # smtp-host = "censored";
-    # smtp-port = 587;
-    # smtp-login = "censored";
-    # smtp-passwd-cmd = "cat ~/.config/himalaya/passwd";
-    # };
-    # };
-    # };
   };
 }