all repos — nixfiles @ 8b418966b2fbf2131e9d082fa0d680bae822ed11

System and user configuration, managed by nix and home-manager

extract nixremote user creation to nix-remote-builder role

Alin
commit

8b418966b2fbf2131e9d082fa0d680bae822ed11

parent

d6d1d924c04fc44a163a7a2a022311daa140eac1

1 file changed, 1 insertion(+), 16 deletions(-)

changed files
M system/hosts/linde.nix → system/hosts/linde.nix
@@ -35,6 +35,7 @@ ../roles/calendar-anonymiser.nix
../roles/forgejo-runner.nix ../roles/goatcounter.nix ../roles/mailer.nix + ../roles/nix-remote-builder.nix ../roles/push-notifications.nix ../roles/readeck.nix ../roles/redis-website.nix
@@ -63,10 +64,6 @@
nix = { settings = { max-jobs = 2; - trusted-users = [ - "root" - "nixremote" - ]; }; buildMachines = [
@@ -156,18 +153,6 @@
security.sudo.extraConfig = '' Defaults:root,%wheel env_keep+=EDITOR ''; - - users.users.nixremote = { - shell = "/bin/sh"; - isNormalUser = true; - home = "/var/lib/nixremote/"; - createHome = true; - openssh.authorizedKeys.keys = [ - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPKGzXGgFm/4Da2KNl1wb7TC2YOu/baP/2eFVBaJY0Wq root@marvin" - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIy9jFioBvV0JA0lc+De2N+vDOABGHgCECW6vkD33CE4 sourcehut" - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIII7sWEwsm8JZiJ0LUnjSt0Kg1RXypG6p5AzP/R2n5ca actions@github.com" - ]; - }; # This value determines the NixOS release from which the default # settings for stateful data, like file locations and database versions