mdebray/tvl-depot
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(whitby): Enable nix.sshServe

Browse source 
This exposes a binary cache over SSH.

Change-Id: Ib934a118cd7315ef76f3dfe795c76a570fbbc47a
Reviewed-on: https://cl.tvl.fyi/c/depot/+/895
Reviewed-by: glittershark <grfn@gws.fyi>
Reviewed-by: BuildkiteCI
Tested-by: BuildkiteCI
This commit is contained in:
Vincent Ambo 2020-07-03 15:22:21 +01:00 • committed by tazjin
parent 44dfc50e2a
commit 3ce41f4fa4
1 changed files with 9 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
ops/nixos/whitby/default.nix
View file

@ -128,6 +128,14 @@ in systemForConfig {
trustedUsers = [ trustedUsers = [
"grfn" "grfn"
]; ];
sshServe = {
enable = true;
keys = with depot.users;
tazjin.keys.all
++ lukegb.keys.all
++ [ glittershark.keys.whitby ];
};
}; };
programs.mtr.enable = true; programs.mtr.enable = true;
@ -171,9 +179,7 @@ in systemForConfig {
users.tazjin = { users.tazjin = {
isNormalUser = true; isNormalUser = true;
extraGroups = [ "git" "wheel" ]; extraGroups = [ "git" "wheel" ];
openssh.authorizedKeys.keys = [ openssh.authorizedKeys.keys = depot.users.tazjin.keys.all;
depot.users.tazjin.keys.frog
];
}; };
users.lukegb = { users.lukegb = {