Compare commits
2 commits
12015f8589
...
4ab3848c83
| Author | SHA1 | Date | |
|---|---|---|---|
| 4ab3848c83 | |||
| a37c5ae83a |
2 changed files with 5 additions and 10 deletions
|
|
@ -1,8 +1,10 @@
|
||||||
keys:
|
keys:
|
||||||
|
- &tdpeuter_Tibo-NixFatDesk age1fva6s64s884z0q2w7de024sp69ucvqu0pg9shrhhqsn3ewlpjfpsh6md7y
|
||||||
- &tdpeuter_Tibo-NixTop age1qzutny0mqpcccqw6myyfntu6wcskruu9ghzvt6r4te7afkqwnguq05ex37
|
- &tdpeuter_Tibo-NixTop age1qzutny0mqpcccqw6myyfntu6wcskruu9ghzvt6r4te7afkqwnguq05ex37
|
||||||
|
|
||||||
creation_rules:
|
creation_rules:
|
||||||
- path_regex: secrets/[^/]+\.(yaml|json|env|ini)$
|
- path_regex: secrets/[^/]+\.(yaml|json|env|ini)$
|
||||||
key_groups:
|
key_groups:
|
||||||
- age:
|
- age:
|
||||||
|
- *tdpeuter_Tibo-NixFatDesk
|
||||||
- *tdpeuter_Tibo-NixTop
|
- *tdpeuter_Tibo-NixTop
|
||||||
|
|
|
||||||
|
|
@ -2,8 +2,6 @@
|
||||||
|
|
||||||
let
|
let
|
||||||
cfg = config.homelab.users.admin;
|
cfg = config.homelab.users.admin;
|
||||||
|
|
||||||
owner = config.users.users.admin.name;
|
|
||||||
in {
|
in {
|
||||||
options.homelab.users.admin.enable = lib.mkEnableOption "user System Administrator";
|
options.homelab.users.admin.enable = lib.mkEnableOption "user System Administrator";
|
||||||
|
|
||||||
|
|
@ -12,12 +10,6 @@ in {
|
||||||
config.users.users.admin.name
|
config.users.users.admin.name
|
||||||
];
|
];
|
||||||
|
|
||||||
sops.secrets."users/admin/authorized_keys" = {
|
|
||||||
format = "yaml";
|
|
||||||
sopsFile = ../../secrets/secrets.yaml;
|
|
||||||
inherit owner;
|
|
||||||
};
|
|
||||||
|
|
||||||
users.users.admin = {
|
users.users.admin = {
|
||||||
description = "System Administrator";
|
description = "System Administrator";
|
||||||
isNormalUser = true;
|
isNormalUser = true;
|
||||||
|
|
@ -25,8 +17,9 @@ in {
|
||||||
config.users.groups.wheel.name # Enable 'sudo' for the user.
|
config.users.groups.wheel.name # Enable 'sudo' for the user.
|
||||||
];
|
];
|
||||||
initialPassword = "ChangeMe";
|
initialPassword = "ChangeMe";
|
||||||
openssh.authorizedKeys.keyFiles = [
|
openssh.authorizedKeys.keys = [
|
||||||
/run/secrets/users/admin/authorized_keys
|
# HomeLab > NixOS > admin > ssh
|
||||||
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGWIOOEqTy8cWKpENVbzD4p7bsQgQb/Dgpzk8i0dZ00T"
|
||||||
];
|
];
|
||||||
packages = with pkgs; [
|
packages = with pkgs; [
|
||||||
curl
|
curl
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue