maurice/snix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(ops/users): move ops' keys in ops/

Browse source 
Change-Id: Ia51eaea658030a893e36d9d6b0c999ca7e71133e
Signed-off-by: Ryan Lahfa <raito@lix.systems>
This commit is contained in:
Ryan Lahfa 2025-03-17 13:33:49 +01:00 • committed by Florian Klink
parent 073142f796
commit a7916624dc
8 changed files with 20 additions and 343 deletions
Download patch file Download diff file Expand all files Collapse all files

2
ops/machines/build01/default.nix
View file

@ -86,7 +86,7 @@ in
services.openssh.enable = true;
time.timeZone = "UTC";
users.users.root.openssh.authorizedKeys.keys = with depot.users; flokli.keys.all ++ edef.keys.all ++ raito.keys.all;
users.users.root.openssh.authorizedKeys.keys = depot.ops.users.all;
users.groups.kvm = { };
users.users.root.extraGroups = [ "kvm" ];

2
ops/machines/gerrit01/default.nix
View file

@ -110,7 +110,7 @@ in
createHome = true;
home = "/var/lib/git";
};
users.root.openssh.authorizedKeys.keys = with depot.users; flokli.keys.all ++ edef.keys.all ++ raito.keys.all;
users.root.openssh.authorizedKeys.keys = depot.ops.users.all;
};
boot.initrd.systemd.enable = true;

2
ops/machines/meta01/default.nix
View file

@ -133,7 +133,7 @@ in
services.nginx.statusPage = true;
users = {
users.root.openssh.authorizedKeys.keys = with depot.users; flokli.keys.all ++ edef.keys.all ++ raito.keys.all;
users.root.openssh.authorizedKeys.keys = depot.ops.users.all;
};
boot.initrd.systemd.enable = true;

2
ops/machines/public01/default.nix
View file

@ -195,7 +195,7 @@ in
# Required for prometheus to be able to scrape stats
services.nginx.statusPage = true;
users.users.root.openssh.authorizedKeys.keys = with depot.users; flokli.keys.all ++ edef.keys.all ++ raito.keys.all;
users.users.root.openssh.authorizedKeys.keys = depot.ops.users.all;
boot.initrd.systemd.enable = true;
zramSwap.enable = true;