summaryrefslogtreecommitdiff
path: root/modules/users
diff options
context:
space:
mode:
Diffstat (limited to 'modules/users')
-rw-r--r--modules/users/builder.nix20
-rw-r--r--modules/users/nixremote.nix29
-rw-r--r--modules/users/root.nix2
3 files changed, 30 insertions, 21 deletions
diff --git a/modules/users/builder.nix b/modules/users/builder.nix
deleted file mode 100644
index 6f14510..0000000
--- a/modules/users/builder.nix
+++ /dev/null
@@ -1,20 +0,0 @@
-{ config, pkgs, ... }: {
- users = {
- mutableUsers = false;
- users.builder = {
- isNormalUser = false;
- isSystemUser = true;
- description = "user for automated building";
- extraGroups = [ "builders" ];
-
- openssh.authorizedKeys.keys = [
- "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPLx3RgUgbE7THS7hRZypyudEKffj0ppwQfQuxIpPf8H root@zenbook"
- ];
- };
- };
-
- services.openssh = {
- ports = [ 22 ];
- settings.PasswordAuthenitcation = false;
- };
-}
diff --git a/modules/users/nixremote.nix b/modules/users/nixremote.nix
new file mode 100644
index 0000000..e74eb78
--- /dev/null
+++ b/modules/users/nixremote.nix
@@ -0,0 +1,29 @@
+{ config, pkgs, ... }: {
+ users = {
+ groups.nixremote = {};
+ mutableUsers = false;
+ users.nixremote = {
+ isNormalUser = true;
+ # createHome = true;
+ homeMode = "500";
+ # isSystemUser = true;
+ description = "user for automated building";
+ group = "nixremote";
+ # extraGroups = [ "builders" ];
+
+ openssh.authorizedKeys.keys = [
+ # "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPLx3RgUgbE7THS7hRZypyudEKffj0ppwQfQuxIpPf8H root@zenbook"
+ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBCG1giaA3GBIdSUvTtaiQd+Bb3obwYAWqKWAryY35cb defin@zenbook"
+ # "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO6k19snOWGYLhNLBYAWIQYtHP88hG7wePNcSe9BAfz1 defin@zenbook"
+ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINdxcB4CepjCBKNBGfKcnkrfNMiJAxm+whuQL+dhSxqh root@zenbook"
+ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOJ2FsW9aYFkSfEUvaAVYuLpMWPeBmEvcF1KcN9bLlQE root@biski"
+ ];
+ };
+ };
+
+ nix.settings.trusted-users = [ "nixremote" ];
+ services.openssh = {
+ ports = [ 22 ];
+ settings.PasswordAuthentication = false;
+ };
+}
diff --git a/modules/users/root.nix b/modules/users/root.nix
index 9464651..f826b77 100644
--- a/modules/users/root.nix
+++ b/modules/users/root.nix
@@ -3,7 +3,7 @@
# Define a user account. Don't forget to set a password with 'passwd'.
users = {
users.root = {
- hashedPassword = "$6$UljPNAdxZ22lP3Bc$8VaEAacZxtXM3Zji2IA7Jf5fXs9pFnAVQff1d8IbfFOKCvjibceyopOAjRXa8lXtpOSJgPW1OO1dzOspqhWnz0";
+ hashedPassword = "$y$j9T$YtRkFL3JLAB/zfyr89aFp.$of1IUt84c2i26l6GQWHO2qX0dNiPDZgVGpaNPVyAs24";
};
};
services.openssh.settings.PasswordAuthentication = false;