@cryptotaxi247 / infra-1 / commits / eb236780

delft/hydra: remove authorized_keys for hydra users

Nobody should ever need to directly log into these. The infra team already has root access and can switch to these users as needed.

Martin Weinelt committed May 7, 2024 at 00:22 UTC eb23678003459fc06c49e55e9ce1568e613bb8c1
1 file changed -7
delft/hydra.nix
-7
@@ -7,13 +7,6 @@ let
7 in
8
9 {
10 - users.extraUsers.hydra.openssh.authorizedKeys.keys =
11 - (import ../ssh-keys.nix).infra-core;
12 - users.extraUsers.hydra-www.openssh.authorizedKeys.keys =
13 - (import ../ssh-keys.nix).infra-core;
14 - users.extraUsers.hydra-queue-runner.openssh.authorizedKeys.keys =
15 - (import ../ssh-keys.nix).infra-core;
16 -
10 services.hydra-dev.enable = true;
11 services.hydra-dev.logo = ./hydra-logo.png;
12 services.hydra-dev.hydraURL = "https://hydra.nixos.org";