Add an account for doing NixOps deployments
Eelco Dolstra committed
Jul 5, 2018 at 10:26 UTC
7907e5717ab44a664287a961b55d3cbc73314937
3 files changed
+10
-2
bastion/network.nix
+7
-1
@@ -100,7 +100,13 @@ in
100
101
users.extraUsers.tarball-mirror.openssh.authorizedKeys.keys = [ sshKeys.eelco ];
102
103
- environment.systemPackages = [ pkgs.git ];
103
+ users.extraUsers.deploy =
104
+ { description = "NixOps deployments";
105
+ isNormalUser = true;
106
+ openssh.authorizedKeys.keys = [ sshKeys.eelco sshKeys.rob ];
107
+ };
108
+
109
+ environment.systemPackages = [ pkgs.nixops ];
110
111
nix.gc.automatic = true;
112
nix.gc.dates = "hourly";
modules/common.nix
-1
@@ -19,5 +19,4 @@ with lib;
19
pkgs.git
20
pkgs.gdb
21
];
22
-
22
}
modules/tarball-mirror.nix
+3
@@ -1,6 +1,9 @@
1
# This module mirrors most tarballs reachable from Nixpkgs's
2
# release.nix to the content-addressed tarball cache at
3
# tarballs.nixos.org.
4
+#
5
+# Note: this service expects AWS credentials for uploading to
6
+# s3://nixpkgs-tarballs in /home/tarball-mirror/.aws/credentials.
7
8
{ config, lib, pkgs, ... }:
9