This commit is contained in:
Aleksandr Lebedev 2025-08-11 14:23:54 +02:00
parent a2c4f7385b
commit 764d5dd68c
9 changed files with 4996 additions and 18 deletions

View file

@ -34,6 +34,7 @@ with lib; rec {
sops.secrets."users/${username}" = mkIf enable {
neededForUsers = true;
};
users.users.root.openssh.authorizedKeys.keys = mkIf enable trustedSshKeys;
systemd.tmpfiles.rules = optionals (impermanence.enable) ["d ${persist}/home/${username} 0700 ${username} users -"]; # /persist/home/<user> created, owned by that user
nix.settings.trusted-users = optionals admin [