privatevoid.net/depot
1
1
Fork 0
Code Issues 23 Pull requests 2 Projects 3 Releases Packages Wiki Activity Actions

modules/deploy-rs-receiver: init

Browse source
This commit is contained in:
Max Headroom 2021-10-16 14:28:30 +02:00
parent a0fa47ddda
commit 05a42b9dc8
2 changed files with 22 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
modules/default.nix
View file

@ -3,6 +3,7 @@ with builtins;
let let
aspects = { aspects = {
autopatch = import ./autopatch; autopatch = import ./autopatch;
deploy-rs-receiver = import ./deploy-rs-receiver;
enterprise = import ./enterprise; enterprise = import ./enterprise;
hydra = import ./hydra; hydra = import ./hydra;
ipfs-lain = import ./ipfs-lain; ipfs-lain = import ./ipfs-lain;
@ -25,6 +26,7 @@ in rec {
networking = [ ssh ]; networking = [ ssh ];
server = [ server = [
deploy-rs-receiver
nix-config-server nix-config-server
] ++ base ++ networking; ] ++ base ++ networking;
}; };

20
modules/deploy-rs-receiver/default.nix Normal file
View file

@ -0,0 +1,20 @@
{
security.sudo.extraRules = [
({
users = [ "deploy" ];
commands = [
"NOPASSWD: /nix/store/*-activate-rs/activate-rs"
"NOPASSWD: /run/current-system/sw/bin/rm /tmp/deploy-rs-canary-*"
];
runAs = "root";
})
];
nix.trustedUsers = [ "deploy" ];
users.users.deploy = {
isNormalUser = true;
uid = 1999;
openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMmdWfmAs/0rno8zJlhBFMY2SumnHbTNdZUXJqxgd9ON max@jericho"
];
};
}