Runs application as non-root user.

configuration.nix

@@ -14,11 +14,26 @@
     graphfix xorg.xauth xorg.xinit
  ];
   
-  users.users.root = {
-    openssh.authorizedKeys.keyFiles = [
-      ./authorized_keys
-    ];
+  users = {
+    mutableUsers = false;
+    users = {
+      root.openssh.authorizedKeys.keyFiles = [
+        ./authorized_keys
+      ];
+      appuser = {
+        isNormalUser = true;
+        group = "appuser";
+        password = "";
+        packages = with pkgs; [
+          graphfix
+        ];
+      };
+    };
+  };
+
+  services.openssh = {
+    enable = true;
+    settings.PasswordAuthentication = false;
   };
-  services.openssh.enable = true;
 }