cst1/infrastructure
1
0
Fork 0
forked from DGNum/infrastructure
Code Pull requests Activity

fix(build01/nix-builder): Use dgn-access-control

Browse source
This commit is contained in:
sinavir 2025-01-10 19:26:24 +01:00
parent 4b30fb8a36
commit 07d226a06e
No known key found for this signature in database
2 changed files with 2 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
machines/nixos/build01/nix-builder.nix
View file

@ -8,15 +8,9 @@
meta,
...
}:
let
keys = (import ../../../keys)._keys;
in
{
config = {
users.users = lib.genAttrs meta.organization.groups.nix-builder (u: {
isNormalUser = true;
openssh.authorizedKeys.keys = keys.${u};
});
dgn-access-control.users = lib.genAttrs meta.organization.groups.nix-builder (u: lib.singleton u);
security.pam.loginLimits = [
{

1
modules/nixos/dgn-access-control.nix
View file

@ -58,6 +58,7 @@ in
users.users = builtins.mapAttrs (
username: members:
{
isNormalUser = lib.mkIf (username != "root") true;
openssh.authorizedKeys.keys = dgn-keys.getKeys members;
}
// optionalAttrs (username == "root") { inherit (nodeMeta) hashedPassword; }