Changes for lambda, with tmpfs root

lib/fudo/secrets.nix

@@ -91,6 +91,12 @@ let
 
 in {
   options.fudo.secrets = with types; {
+    enable = mkOption {
+      type = bool;
+      description = "Include secrets in the build (disable when secrets are unavailable)";
+      default = true;
+    };
+
     host-secrets = mkOption {
       type = attrsOf (attrsOf (submodule secretOpts));
       description = "Map of hosts to host secrets";
@@ -117,7 +123,7 @@ in {
     };
   };
 
-  config = {
+  config = mkIf cfg.enable {
     users.groups = {
       ${cfg.secret-group} = { members = cfg.secret-users ++ nix-build-users; };
     };

lib/fudo/users.nix

@@ -214,21 +214,6 @@ in {
           filterAttrs (username: userOpts: userOpts.home-manager-config != null)
             sys.local-users;
       in mapAttrs (username: userOpts: userOpts.home-manager-config) home-manager-users;
-      
-      # users = let
-      #   home-manager-users =
-      #     filterAttrs (username: userOpts: userOpts.home-manager-config != null)
-      #       local-users;
-      #   common-user-config = username: {
-      #     home.file.".k5login" = {
-      #       source = pkgs.writeText "${username}-k5login" ''
-      #       ${concatStringsSep "\n" config.fudo.users.${username}.k5login}
-      #     '';
-      #     };
-      #   };
-      # in mapAttrs (username: userOpts:
-      #   userOpts.home-manager-config // (common-user-config username))
-      #   home-manager-users;
     };
   };
 }