make darwin key root only
This commit is contained in:
parent
a4101d21dc
commit
d2b9dd528e
|
@ -57,12 +57,8 @@ let
|
||||||
'';
|
'';
|
||||||
|
|
||||||
sops.secrets = lib.mkIf (lib.hasPrefix "/run/secrets/" (thatHost.ssh.userPrivateKey or "")) {
|
sops.secrets = lib.mkIf (lib.hasPrefix "/run/secrets/" (thatHost.ssh.userPrivateKey or "")) {
|
||||||
"${lib.removePrefix "/run/secrets/" thatHost.ssh.userPrivateKey}" = {
|
"${lib.removePrefix "/run/secrets/" thatHost.ssh.userPrivateKey}" = { };
|
||||||
mode = "0440";
|
|
||||||
group = "nix-community-builder";
|
|
||||||
};
|
};
|
||||||
};
|
|
||||||
users.groups.nix-community-builder = {};
|
|
||||||
|
|
||||||
})
|
})
|
||||||
# in
|
# in
|
||||||
|
|
|
@ -42,7 +42,7 @@
|
||||||
extraGroups = [
|
extraGroups = [
|
||||||
"pbsds"
|
"pbsds"
|
||||||
"users" # backward compat
|
"users" # backward compat
|
||||||
"nix-community-builder"
|
#"nix-community-builder"
|
||||||
"networkmanager"
|
"networkmanager"
|
||||||
"audio"
|
"audio"
|
||||||
"sound"
|
"sound"
|
||||||
|
|
|
@ -41,7 +41,7 @@
|
||||||
"rocm.pbsds.net".proxyJump = "isvegg.pvv.ntnu.no";
|
"rocm.pbsds.net".proxyJump = "isvegg.pvv.ntnu.no";
|
||||||
|
|
||||||
# nix-community
|
# nix-community
|
||||||
"darwin-build-box.nix-community.org" = {};
|
#"darwin-build-box.nix-community.org" = {};
|
||||||
|
|
||||||
# ntnu
|
# ntnu
|
||||||
"garmr.idi.ntnu.no".forwardX11 = true;
|
"garmr.idi.ntnu.no".forwardX11 = true;
|
||||||
|
|
Loading…
Reference in New Issue