ghaf-webserver: Add gala uploaders

Signed-off-by: Marko Lindqvist <[email protected]>

hosts/ghaf-webserver/configuration.nix

@@ -14,6 +14,7 @@
   imports =
     [
       ./disk-config.nix
+      ./gala_uploaders.nix
       (modulesPath + "/profiles/qemu-guest.nix")
       inputs.sops-nix.nixosModules.sops
       inputs.disko.nixosModules.disko

hosts/ghaf-webserver/gala_uploaders.nix

@@ -0,0 +1,48 @@
+# SPDX-FileCopyrightText: 2022-2024 TII (SSRC) and the Ghaf contributors
+# SPDX-License-Identifier: Apache-2.0
+{ lib, ... }:
+let
+  groupName = "gala";
+
+  # add new uploaders here
+  uploaders = [
+    {
+      desc = "Mikko Koivisto";
+      name = "mikko_koivisto";
+      keys = [
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHx2xDbBcBFRCQ8vtA47UMT4zBasUWxK+1CYOQSrv2BL [email protected]"
+      ];
+    }
+    {
+      desc = "Nikita Bazulin";
+      name = "nikita.bazulin";
+      keys = [
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL/8+QSIlYHTMS6SOTd59WudS76HtZmbnSTSO04icPw1 [email protected]"
+      ];
+    }
+  ];
+in
+{
+  users = {
+    groups."${groupName}" = { };
+
+    users = builtins.listToAttrs (
+      map (
+        {
+          desc,
+          name,
+          keys,
+        }:
+        lib.nameValuePair name {
+          inherit name;
+
+          description = desc;
+          openssh.authorizedKeys.keys = keys;
+
+          isNormalUser = true;
+          extraGroups = [ groupName ];
+        }
+      ) uploaders
+    );
+  };
+}