From 6d2acd2e3cf39100c9ec972236097f3f22cfe9c4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Kier=C3=A1n=20Meinhardt?= <kmein@posteo.de>
Date: Tue, 17 Feb 2026 21:43:08 +0100
Subject: [PATCH] fix zaatar build: move printer groups to configs/default.nix
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

printing.nix can't conditionally set users.users.me.extraGroups —
any mention of users.users.me in the module system creates the user
entry and triggers the isNormalUser/isSystemUser assertion on machines
without a 'me' user (like zaatar).

Move lp/scanner groups to configs/default.nix where users.users.me is
defined. On zaatar, root gets lp/scanner groups directly.
---
 configs/default.nix              | 2 ++
 configs/printing.nix             | 2 +-
 systems/zaatar/configuration.nix | 2 ++
 3 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/configs/default.nix b/configs/default.nix
index af217df..fa1aafc 100644
--- a/configs/default.nix
+++ b/configs/default.nix
@@ -66,6 +66,8 @@ in
         extraGroups = [
           "pipewire"
           "audio"
+          "lp"
+          "scanner"
         ];
       };
 
diff --git a/configs/printing.nix b/configs/printing.nix
index 6c0dbd1..5b28d09 100644
--- a/configs/printing.nix
+++ b/configs/printing.nix
@@ -26,7 +26,7 @@ in
     openFirewall = true;
   };
 
-  users.users.me.extraGroups = [ "lp" "scanner" ];
+  # users.users.me.extraGroups is set in configs/default.nix which defines the "me" user
 
   hardware.printers.ensurePrinters = [
     {
diff --git a/systems/zaatar/configuration.nix b/systems/zaatar/configuration.nix
index bfea5ed..91470f3 100644
--- a/systems/zaatar/configuration.nix
+++ b/systems/zaatar/configuration.nix
@@ -77,6 +77,8 @@
       pkgs.python3 # for sshuttle
     ];
 
+  users.users.root.extraGroups = [ "lp" "scanner" ];
+
   networking = {
     hostName = "zaatar";
     wireless.interfaces = [ "wlp2s0" ];