summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSkullheadx <andrew@montgomery.systems>2026-07-20 21:30:22 -0400
committerSkullheadx <andrew@montgomery.systems>2026-07-20 21:30:22 -0400
commitf244fec1faafed0362ec9de8897d99f830a3a20d (patch)
treec469f28400b3d92399f4f7ce082af4a6c8d7a28f
parentadd zig to nepsis (diff)
downloadnixos-f244fec1faafed0362ec9de8897d99f830a3a20d.tar.gz
nixos-f244fec1faafed0362ec9de8897d99f830a3a20d.tar.bz2
nixos-f244fec1faafed0362ec9de8897d99f830a3a20d.zip
nixremote user setup
-rw-r--r--hosts/icon/configuration.nix13
1 files changed, 13 insertions, 0 deletions
diff --git a/hosts/icon/configuration.nix b/hosts/icon/configuration.nix
index 082d06f..03a7788 100644
--- a/hosts/icon/configuration.nix
+++ b/hosts/icon/configuration.nix
@@ -48,6 +48,7 @@
};
users.groups.git = {};
+ users.groups.nixremote = {};
users.users.nginx.extraGroups = ["git"];
systemd.services.nginx.serviceConfig = {
SupplementaryGroups = ["git"];
@@ -87,8 +88,20 @@
../../pubkeys/work_laptop_ssh.pub
];
};
+ nixremote = {
+ isSystemUser = true;
+ group = "nixremote";
+ home = "/home/nixremote";
+ createHome = true;
+ homeMode = "555";
+ openssh.authorizedKeys.keyFiles = [
+ ../../pubkeys/desktop_ssh.pub
+ ];
+ };
};
+ nix.settings.trusted-users = ["root" "andrew" "nixremote" "@wheel"];
+
services.cgit."cgit" = {
enable = true;
scanPath = "/srv/git";