unexplrd/nixos-blueprint
2
2
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

bob

Browse Source
This commit is contained in:
unexplrd
2025-03-02 22:48:48 +02:00
parent 0a710faa55
commit 10e0ab4813
3 changed files with 20 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
flake.lock generated
View File

@ -544,8 +544,8 @@
"mysecrets": { "mysecrets": {
"flake": false, "flake": false,
"locked": { "locked": {
"lastModified": 1740932567, "lastModified": 1740938100,
"narHash": "sha256-2PfJuyVEUh/4xGTx8MwPFNq3po/TTkDyWz3RJC3JfJc=", "narHash": "sha256-MjcA5IFJq5B7uBO+Bj676txMlsR3NraI13hJ4B9Fz/E=",
"path": "/home/user/nix-secrets", "path": "/home/user/nix-secrets",
"type": "path" "type": "path"
}, },

5
hosts/dunamis/builder.nix Normal file
View File

@ -0,0 +1,5 @@
{
nix.settings = {
secret-key-files = /var/nix/cache-priv-key.pem;
};
}

19
hosts/dunamis/users.nix
View File

@ -7,7 +7,10 @@
sopSec = config.sops.secrets; sopSec = config.sops.secrets;
secrets = inputs.mysecrets; secrets = inputs.mysecrets;
in { in {
nix.settings.trusted-users = ["user"]; nix.settings.trusted-users = [
"user"
"remotebuild"
];
users.mutableUsers = false; users.mutableUsers = false;
users.users = { users.users = {
user = { user = {
@ -21,10 +24,14 @@ in {
"${secrets}/ssh/id_ed25519_eldrid_user.pub" "${secrets}/ssh/id_ed25519_eldrid_user.pub"
]; ];
}; };
# work = { remotebuild = {
# isNormalUser = true; isNormalUser = true;
# extraGroups = ["video"]; createHome = false;
# shell = pkgs.nushell; group = "remotebuild";
# }; openssh.authorizedKeys.keyFiles = [
"${secrets}/ssh/id_ed25519_eldrid_rmbuild.pub"
];
};
}; };
users.groups.remotebuild = {};
} }