From 0a3979b9ae1f502912390e8943b3dbeee4637b07 Mon Sep 17 00:00:00 2001
From: Alex Jackson <contact@ajaxbits.com>
Date: Thu, 10 Sep 2026 20:02:32 -0500
Subject: [PATCH] feat: add restricted smart-home agent user

---
 hosts/patroclus/configuration.nix | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/hosts/patroclus/configuration.nix b/hosts/patroclus/configuration.nix
index c4fe72d..d3994c7 100644
--- a/hosts/patroclus/configuration.nix
+++ b/hosts/patroclus/configuration.nix
@@ -25,6 +25,20 @@ in
     firewall.enable = false;
   };
 
+  users = {
+    groups.smarthome-editors = { };
+    users = {
+      admin.extraGroups = [ "smarthome-editors" ];
+      smarthome-agent = {
+        isNormalUser = true;
+        description = "Restricted smart-home configuration agent";
+        group = "smarthome-editors";
+        createHome = true;
+        hashedPassword = "!";
+      };
+    };
+  };
+
   components = {
     audiobookshelf = {
       enable = true;