Compare commits
No commits in common. "e201d874b32e41d253d581e07bece4c8f4ef4b1c" and "0deecc0aeaa5953a8b510eb1c8b4f99b0945cf82" have entirely different histories.
e201d874b3
...
0deecc0aea
2 changed files with 4 additions and 29 deletions
|
|
@ -15,7 +15,6 @@
|
||||||
];
|
];
|
||||||
trusted-users = [
|
trusted-users = [
|
||||||
"root"
|
"root"
|
||||||
"nixremote"
|
|
||||||
"@wheel"
|
"@wheel"
|
||||||
];
|
];
|
||||||
|
|
||||||
|
|
@ -29,11 +28,6 @@
|
||||||
system = "x86_64-linux";
|
system = "x86_64-linux";
|
||||||
protocol = "ssh-ng";
|
protocol = "ssh-ng";
|
||||||
}
|
}
|
||||||
{
|
|
||||||
hostName = "lilith-pc";
|
|
||||||
system = "x86_64-linux";
|
|
||||||
protocol = "ssh-ng";
|
|
||||||
}
|
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
|
||||||
|
|
@ -1,28 +1,14 @@
|
||||||
{ config, ... }:
|
{ config, ...}: let
|
||||||
let
|
host = config.networking.hostName;
|
||||||
host = config.networking.hostName;
|
in {
|
||||||
in
|
|
||||||
{
|
|
||||||
users.mutableUsers = false;
|
users.mutableUsers = false;
|
||||||
users.users = {
|
users.users = {
|
||||||
lilith = {
|
lilith = {
|
||||||
isNormalUser = true;
|
isNormalUser = true;
|
||||||
uid = 1000;
|
uid = 1000;
|
||||||
extraGroups = [
|
extraGroups = [ "wheel" "networkmanager" ];
|
||||||
"wheel"
|
|
||||||
"networkmanager"
|
|
||||||
];
|
|
||||||
hashedPasswordFile = config.sops.secrets."user/password".path;
|
hashedPasswordFile = config.sops.secrets."user/password".path;
|
||||||
};
|
};
|
||||||
|
|
||||||
remotebuilder = {
|
|
||||||
isNormalUser = false;
|
|
||||||
group = "users";
|
|
||||||
extraGroups = [ ];
|
|
||||||
openssh.authorizedKeys.keys = [
|
|
||||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN7RJ1q5TczmSDge2U2lXrZVtRzOM/D+Bodwrc6h3EjA"
|
|
||||||
];
|
|
||||||
};
|
|
||||||
};
|
};
|
||||||
|
|
||||||
sops.secrets = {
|
sops.secrets = {
|
||||||
|
|
@ -40,10 +26,5 @@ in
|
||||||
path = "/home/lilith/.ssh/id_ed25519.pub";
|
path = "/home/lilith/.ssh/id_ed25519.pub";
|
||||||
owner = "lilith";
|
owner = "lilith";
|
||||||
};
|
};
|
||||||
"ssh/nixremote/private" = {
|
|
||||||
sopsFile = ../../secrets/default.yaml;
|
|
||||||
path = "/root/.ssh/nixremote";
|
|
||||||
owner = "root";
|
|
||||||
};
|
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue