nixos: define user limits

nixos/users.nix

@@ -1,27 +1,58 @@
-{ pkgs, ... }:
+{ lib, ... }:
-{
+let
-  users.users =
+  users = [
-    let
-      adminGroups = [
-        "adm"
-        "named"
-        "networkmanager"
-        "nginx"
-        "tuxcord"
-        "wheel"
-      ];
-    in
     {
-      error = {
+      name = "error";
-        isNormalUser = true;
+      options.admin = true;
-        shell = pkgs.fish;
+    }
-        extraGroups = adminGroups;
+    {
-      };
+      name = "javalsai";
+      options.admin = true;
+    }
+    {
+      name = "max";
+      options.admin = true;
+    }
+    {
+      name = "vectorum";
+    }
+  ];
 
-      javalsai = {
+  adminGroups = [
-        isNormalUser = true;
+    "adm"
-        shell = pkgs.zsh;
+    "named"
-        extraGroups = adminGroups;
+    "networkmanager"
-      };
+    "nginx"
+    "tuxcord"
+    "wheel"
+  ];
+
+  mkUser = name: uid: options: {
+    users.users.${name} = {
+      isNormalUser = true;
+      extraGroups = lib.optionals (options.admin or false) adminGroups;
+      inherit uid;
     };
-}
+
+    systemd.slices."user-${builtins.toString uid}".sliceConfig = {
+      CPUQuota = "50%";
+      CPUWeight = "10";
+      IOAccounting = true;
+      IOWeight = "10";
+      MemoryMax = "2G";
+      MemorySwapMax = "1G";
+      TasksMax = "100";
+    };
+  };
+in
+(builtins.foldl'
+  (attrs: user: {
+    options = lib.recursiveUpdate attrs.options (mkUser user.name attrs.uid (user.options or { }));
+    uid = attrs.uid + 1;
+  })
+  {
+    options = { };
+    uid = 1000;
+  }
+  users
+).options