bastion: Add "deploy" to "wheel"
It could already use "nixops ssh" to login as root, so this doesn't reduce security.
Eelco Dolstra committed
Feb 26, 2019 at 04:03 UTC
4555112e46c107ac5e762284e93159776dc3a77e
1 file changed
+3
bastion/network.nix
+3
@@ -120,8 +120,11 @@ in
120
isNormalUser = true;
121
openssh.authorizedKeys.keys =
122
[ sshKeys.eelco sshKeys.rob sshKeys.graham sshKeys.zimbatm sshKeys.amine ];
123
+ extraGroups = [ "wheel" ];
124
};
125
126
+ security.sudo.wheelNeedsPassword = false;
127
+
128
environment.systemPackages =
129
[ pkgs.nixops
130
pkgs.awscli