Disable mutable users and SSH keys
Eelco Dolstra committed
Feb 23, 2015 at 12:55 UTC
a0708a2fd113c643b730c381da4d85ebdade2ce3
3 files changed
+25
-12
delft/common.nix
+4
-12
@@ -7,20 +7,12 @@ with pkgs.lib;
7
8
nixpkgs.config.allowUnfree = true;
9
10
- users.extraUsers.root.openssh.authorizedKeys.keys =
11
- [ # ~/.ssh/id_mass_update
12
- "ssh-dss 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 root@buildfarm"
13
- ];
10
+ users.mutableUsers = false;
11
15
- users.extraUsers.buildfarm =
16
- { description = "Hydra unprivileged build slave";
17
- home = "/home/buildfarm";
18
- createHome = true;
19
- useDefaultShell = true;
20
- openssh.authorizedKeys.keys = singleton "ssh-dss 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 buildfarm@nixos";
21
- };
12
+ users.extraUsers.root.openssh.authorizedKeys.keys =
13
+ with import ../ssh-keys.nix; [ eelco rob ];
14
23
- #boot.kernelPackages = pkgs.linuxPackages_3_4;
15
+ services.openssh.authorizedKeysFiles = mkForce [ "/etc/ssh/authorized_keys.d/%u" ];
16
17
boot.kernelModules = [ "coretemp" ];
18
delft/lucifer.nix
+7
@@ -124,4 +124,11 @@
124
startAt = "Sun 01:45";
125
};
126
127
+ users.extraUsers.rbvermaa =
128
+ { description = "Rob Vermaas";
129
+ home = "/home/rbvermaa";
130
+ isNormalUser = true;
131
+ openssh.authorizedKeys.keys = [ (import ../ssh-keys.nix).rob ];
132
+ };
133
+
134
}
delft/wendy.nix
+14
@@ -197,4 +197,18 @@ in
197
startAt = "Sat 05:45";
198
};
199
200
+ users.extraUsers.eelco =
201
+ { description = "Eelco Dolstra";
202
+ home = "/home/eelco";
203
+ isNormalUser = true;
204
+ openssh.authorizedKeys.keys = [ (import ../ssh-keys.nix).eelco ];
205
+ };
206
+
207
+ users.extraUsers.rbvermaa =
208
+ { description = "Rob Vermaas";
209
+ home = "/home/rbvermaa";
210
+ isNormalUser = true;
211
+ openssh.authorizedKeys.keys = [ (import ../ssh-keys.nix).rob ];
212
+ };
213
+
214
}