mac

hosts/m2/darwin.nix

@@ -0,0 +1,10 @@
+{ hostName, ... }:
+{
+  # networking.hostName and networking.localHostName are derived from the
+  # registry name; computerName controls the user-visible macOS name.
+  networking.computerName = hostName;
+
+  # Keep this value stable after the first activation. It is independent of
+  # the Home Manager stateVersion in hosts/default.nix.
+  system.stateVersion = 7;
+}

modules/users/moons/darwin.nix

@@ -0,0 +1,14 @@
+{ primaryUser, ... }:
+{
+  # The account already exists in macOS; declaring only its home keeps
+  # nix-darwin from taking ownership of user creation and deletion.
+  users.users.${primaryUser}.home = "/Users/${primaryUser}";
+
+  nix.settings = {
+    allowed-users = [ primaryUser ];
+    trusted-users = [
+      "root"
+      primaryUser
+    ];
+  };
+}