fix(build01/nix-builder): Use dgn-access-control

machines/nixos/build01/nix-builder.nix

@@ -8,15 +8,9 @@
   meta,
   ...
 }:
-let
-  keys = (import ../../../keys)._keys;
-in
 {
   config = {
-    users.users = lib.genAttrs meta.organization.groups.nix-builder (u: {
+    dgn-access-control.users = lib.genAttrs meta.organization.groups.nix-builder (u: lib.singleton u);
-      isNormalUser = true;
-      openssh.authorizedKeys.keys = keys.${u};
-    });
 
     security.pam.loginLimits = [
       {

modules/nixos/dgn-access-control.nix

@@ -58,6 +58,7 @@ in
     users.users = builtins.mapAttrs (
       username: members:
       {
+        isNormalUser = lib.mkIf (username != "root") true;
         openssh.authorizedKeys.keys = dgn-keys.getKeys members;
       }
       // optionalAttrs (username == "root") { inherit (nodeMeta) hashedPassword; }