all repos — nixfiles @ aedea00a8b6ccbbeea0ea0215af0652ff7ccbd28

System and user configuration, managed by nix and home-manager

system/roles/ci-runner.nix (view raw)

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
{
  config,
  pkgs,
  ...
}:
{
  imports = [
    ../settings/configuration/ssh-inhibit-idle.nix
  ];

  services.logind.settings.Login = {
    IdleAction = "poweroff";
    IdleActionSec = "1 hour";
    StopIdleSessionSec = "15 min";
  };

  users.groups.laminar = { };
  users.users.laminar = {
    group = "laminar";
    home = "/var/lib/laminar";
    isNormalUser = true;
    createHome = true;
    packages = with pkgs; [
      fishMinimal
      bash
      gnutar
      bzip2
      gzip
      config.programs.git.package
      cached-nix-shell
      nix
      nix-build-uncached
      config.programs.ssh.package
      laminar
      moreutils
      flock
      just
      rsync
      go
    ];
    openssh.authorizedKeys.keys = [
      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHeFYWByDp3lurxzYbQPiMJfHcFEDUdj3TAu5ib2Sv1A laminar@hasel.alin.ovh"
    ];
  };
}