Projects/roowho2
1
2
Fork 0
Code Issues 35 Pull Requests Actions Releases Activity

{rwhod,fingerd}: add ignore-user lists

Browse Source
This commit is contained in:
Oystein Kristoffer Tveit
2026-06-24 12:43:10 +09:00
parent b8b4d8dcc0
commit 4af04d7dd6
9 changed files with 288 additions and 28 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nix/module.nix
+35 -2
View File
@@ -22,6 +22,20 @@ in {
default = true;
};
ignore_list_path = lib.mkOption {
type = lib.types.nullOr lib.types.path;
default = null;
example = lib.literalExpression ''
pkgs.writeText "rwhod-ignore-list" '''
# Ignore the following users from rwhod
user:user1
user:user2
uid:1001
'''
'';
description = "Path to the ignore list for users that should be hidden from rwhod.";
};
# TODO: allow configuring socket config
};
fingerd = {
@@ -29,6 +43,20 @@ in {
default = true;
};
ignore_list_path = lib.mkOption {
type = lib.types.nullOr lib.types.path;
default = null;
example = lib.literalExpression ''
pkgs.writeText "rwhod-ignore-list" '''
# Ignore the following users from rwhod
user:user1
user:user2
uid:1001
'''
'';
description = "Path to the ignore list for users that should be hidden from fingerd.";
};
# TODO: allow configuring socket config
};
};
@@ -115,7 +143,7 @@ in {
RuntimeDirectory = "roowho2/root-mnt";
RuntimeDirectoryMode = "0700";
RootDirectory = "/run/roowho2/root-mnt";
BindReadOnlyPaths = [
BindReadOnlyPaths = lib.filter (x: x != null) ([
builtins.storeDir
"/etc"
@@ -130,7 +158,12 @@ in {
# NOTE: finger needs access to stat tty devices
"/dev"
];
] ++ lib.optionals cfg.settings.rwhod.enable [
cfg.settings.rwhod.ignore_list_path
] ++ lib.optionals cfg.settings.fingerd.enable [
cfg.settings.fingerd.ignore_list_path
]);
UMask = "0077";
};