3 files changed, 51 insertions, 0 deletions
diff --git a/modules/contracts/declarativeUsers.nix b/modules/contracts/declarativeUsers.nix
new file mode 100644
index 0000000..79ba00f
--- /dev/null
+++ b/modules/contracts/declarativeUsers.nix
@@ -0,0 +1,14 @@
+{ lib, ... }:
+{
+  contracts.declarativeUsers = {
+    meta = {
+      maintainers = [];
+      description = "";
+    };
+    input = {};
+    output.options.users = lib.mkOption {
+      type = lib.types.attrsOf (lib.types.submodule {});
+      default = {};
+    };
+  };
+}
diff --git a/modules/hardcodedUsers.nix b/modules/hardcodedUsers.nix
new file mode 100644
index 0000000..344daf2
--- /dev/null
+++ b/modules/hardcodedUsers.nix
@@ -0,0 +1,20 @@
+{ config, lib, ... }: {
+  options.hardcodedUsers = lib.mkOption {
+    type = lib.types.attrsOf (lib.types.submodule (mod: {
+      options = {
+        users = lib.mkOption {
+          type = lib.types.attrsOf (lib.types.submodule {});
+          default = {};
+        };
+        declarativeUsers = lib.mkOption {
+          type = config.contracts.declarativeUsers.provider;
+          default = null;
+        };
+      };
+    }));
+    default = {};
+  };
+  config.hardcodedUsers.default.declarativeUsers.output = {
+    inherit (config.hardcodedUsers.default) users;
+  };
+}
diff --git a/modules/usersDeclarativeUsers.nix b/modules/usersDeclarativeUsers.nix
new file mode 100644
index 0000000..2b5e2fc
--- /dev/null
+++ b/modules/usersDeclarativeUsers.nix
@@ -0,0 +1,17 @@
+{ config, lib, ... }:
+{
+  options.users.declarativeUsers  = lib.mkOption {
+    type = lib.types.nullOr config.contracts.declarativeUsers.consumer;
+    default = null;
+  };
+  config = lib.mkIf (config.users.declarativeUsers != null) {
+    users = {
+      users = lib.mapAttrs (name: _: {
+        isNormalUser = lib.mkIf (name != "root") (lib.mkDefault true);
+      })
+        config.users.declarativeUsers.output.users;
+      groups = lib.mapAttrs (_: _: {})
+        config.users.declarativeUsers.output.users;
+    };
+  };
+}