a bit of reorg

nixosModules/users.nix

@@ -0,0 +1,26 @@
+{ config, userSettings, ... }:
+{
+  # Uses rust-based sudo
+  security.sudo-rs = {
+    enable = true;
+    execWheelOnly = false;
+    wheelNeedsPassword = false; # allows sudo without password for those in the wheel group
+  };
+
+  users.users.root = {
+    isSystemUser = true;
+    extraGroups = [
+      "wheel"   # needed for sudo without password
+      "docker"  # needed for docker without sudo
+    ];
+    openssh.authorizedKeys.keyFiles = [ /root/.ssh/authorized_keys ];
+  };
+
+  home-manager = {
+    useGlobalPkgs = true;
+    users.root = {
+      home.stateVersion = config.system.stateVersion;
+      imports = [ ./home-manager/git.nix ];
+    };
+  };
+}