pederbs/config
pederbs
/
config
2
1
Fork 0
Code Issues Pull Requests Releases Activity

make darwin key root only

This commit is contained in:
Peder Bergebakken Sundt 2024-10-10 19:20:20 +02:00
parent a4101d21dc
commit d2b9dd528e
3 changed files with 3 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
profiles/remote-builders.nix
View File

@ -57,12 +57,8 @@ let
'';
sops.secrets = lib.mkIf (lib.hasPrefix "/run/secrets/" (thatHost.ssh.userPrivateKey or "")) {
"${lib.removePrefix "/run/secrets/" thatHost.ssh.userPrivateKey}" = {
mode = "0440";
group = "nix-community-builder";
};
"${lib.removePrefix "/run/secrets/" thatHost.ssh.userPrivateKey}" = { };
};
users.groups.nix-community-builder = {};
})
# in

2
users/pbsds/default.nix
View File

@ -42,7 +42,7 @@
extraGroups = [
"pbsds"
"users" # backward compat
"nix-community-builder"
#"nix-community-builder"
"networkmanager"
"audio"
"sound"

2
users/pbsds/home/profiles/ssh.nix
View File

@ -41,7 +41,7 @@
"rocm.pbsds.net".proxyJump = "isvegg.pvv.ntnu.no";
# nix-community
"darwin-build-box.nix-community.org" = {};
#"darwin-build-box.nix-community.org" = {};
# ntnu
"garmr.idi.ntnu.no".forwardX11 = true;