diff options
| author | Devin Finlinson <devin.finlinson@pm.me> | 2026-03-06 02:19:47 -0700 |
|---|---|---|
| committer | Devin Finlinson <devin.finlinson@pm.me> | 2026-03-06 02:19:47 -0700 |
| commit | 2f6bfa3994137152939d448e05374dccb8d6970b (patch) | |
| tree | 61465b86bc7bebc6c2f5abeea4600597fc691653 /modules/users/builder.nix | |
| parent | 16e532f4b067cbf0dfbc1c2455518869f84d14fe (diff) | |
builder user + key cleanup
Diffstat (limited to 'modules/users/builder.nix')
| -rw-r--r-- | modules/users/builder.nix | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/modules/users/builder.nix b/modules/users/builder.nix new file mode 100644 index 0000000..6f14510 --- /dev/null +++ b/modules/users/builder.nix @@ -0,0 +1,20 @@ +{ config, pkgs, ... }: { + users = { + mutableUsers = false; + users.builder = { + isNormalUser = false; + isSystemUser = true; + description = "user for automated building"; + extraGroups = [ "builders" ]; + + openssh.authorizedKeys.keys = [ + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPLx3RgUgbE7THS7hRZypyudEKffj0ppwQfQuxIpPf8H root@zenbook" + ]; + }; + }; + + services.openssh = { + ports = [ 22 ]; + settings.PasswordAuthenitcation = false; + }; +} |
