nico/dots
2
2
Fork 1
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

users: add deploy

Browse source
This commit is contained in:
Nico 2025-08-30 18:13:07 +10:00
parent 2a096e3d0d
commit cded5bfdf7
Signed by: nico
SSH key fingerprint: SHA256:XuacYOrGqRxC3jVFjfLROn1CSvLz85Dec6N7O9Gwu/0
2 changed files with 29 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
flake.nix
View file

@ -52,6 +52,7 @@
./modules/users/nico.nix ./modules/users/nico.nix
./modules/users/alex.nix ./modules/users/alex.nix
./modules/users/deploy.nix
./modules/hardware/secureboot.nix ./modules/hardware/secureboot.nix
lanzaboote.nixosModules.lanzaboote lanzaboote.nixosModules.lanzaboote

28
modules/users/deploy.nix Normal file
View file

@ -0,0 +1,28 @@
{ config, lib, pkgs, ...}:
{
users.users.deploy = {
isNormalUser = true;
home = "/var/empty";
group = "deploy";
};
users.groups.deploy = {};
users.users.deploy.openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILXwl+UyfeN/9M/z21mlVS3guYEqIjtgAf5pCPkjXhR0"
];
security.sudo.extraRules = [
{
users = [ "deploy" ];
runAs = "root";
commands = [
{
command = "ALL";
options = [ "NOPASSWD" ];
}
];
}
];
}