mkDeploy
This commit is contained in:
parent
a2c4f7385b
commit
764d5dd68c
9 changed files with 4996 additions and 18 deletions
|
|
@ -34,6 +34,7 @@ with lib; rec {
|
|||
sops.secrets."users/${username}" = mkIf enable {
|
||||
neededForUsers = true;
|
||||
};
|
||||
users.users.root.openssh.authorizedKeys.keys = mkIf enable trustedSshKeys;
|
||||
systemd.tmpfiles.rules = optionals (impermanence.enable) ["d ${persist}/home/${username} 0700 ${username} users -"]; # /persist/home/<user> created, owned by that user
|
||||
|
||||
nix.settings.trusted-users = optionals admin [
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue