make darwin key root only

This commit is contained in:
Peder Bergebakken Sundt 2024-10-10 19:20:20 +02:00
parent a4101d21dc
commit d2b9dd528e
3 changed files with 3 additions and 7 deletions

View File

@ -57,12 +57,8 @@ let
''; '';
sops.secrets = lib.mkIf (lib.hasPrefix "/run/secrets/" (thatHost.ssh.userPrivateKey or "")) { sops.secrets = lib.mkIf (lib.hasPrefix "/run/secrets/" (thatHost.ssh.userPrivateKey or "")) {
"${lib.removePrefix "/run/secrets/" thatHost.ssh.userPrivateKey}" = { "${lib.removePrefix "/run/secrets/" thatHost.ssh.userPrivateKey}" = { };
mode = "0440";
group = "nix-community-builder";
};
}; };
users.groups.nix-community-builder = {};
}) })
# in # in

View File

@ -42,7 +42,7 @@
extraGroups = [ extraGroups = [
"pbsds" "pbsds"
"users" # backward compat "users" # backward compat
"nix-community-builder" #"nix-community-builder"
"networkmanager" "networkmanager"
"audio" "audio"
"sound" "sound"

View File

@ -41,7 +41,7 @@
"rocm.pbsds.net".proxyJump = "isvegg.pvv.ntnu.no"; "rocm.pbsds.net".proxyJump = "isvegg.pvv.ntnu.no";
# nix-community # nix-community
"darwin-build-box.nix-community.org" = {}; #"darwin-build-box.nix-community.org" = {};
# ntnu # ntnu
"garmr.idi.ntnu.no".forwardX11 = true; "garmr.idi.ntnu.no".forwardX11 = true;