env/users: add option for disabling user login

2 files changed, 6 insertions, 1 deletions

diff --git a/env/users/default.nix b/env/users/default.nix
index fed8906..f490d9a 100644
--- a/env/users/default.nix
+++ b/env/users/default.nix
@@ -22,6 +22,11 @@ with lib; {
           default = [ ];
         };
 
+        allowLogin = mkOption {
+          type = bool;
+          default = true;
+        };
+
         hardAliases = mkOption {
           type = listOf str;
           default = [ ];
diff --git a/sys/users.nix b/sys/users.nix
index e5ebc8d..095c6d3 100644
--- a/sys/users.nix
+++ b/sys/users.nix
@@ -31,7 +31,7 @@ in
         isNormalUser = true;
         group = username;
         extraGroups = [ "users" ] ++ user.groups;
-        shell = pkgs.zsh;
+        shell = if user.allowLogin then pkgs.zsh else null;
       })
       cfg.users;