Skynet/nixos
7
1
Fork 0
Code Issues 45 Pull requests 1 Projects Releases Packages Wiki Activity Actions

[skip ci]: granted trainees permission to a server to test stuff out

Browse source
This commit is contained in:
silver 2023-11-20 20:12:11 +00:00
parent 21612fed13
commit 03add8f999
2 changed files with 27 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

24
machines/marvin.nix
View file

@ -17,6 +17,12 @@ Notes:
name = "marvin";
ip_pub = "193.1.99.81";
hostname = "${name}.skynet.ie";
groups = [
"skynet-admins-linux"
"skynet-trainees-linux"
];
groups_trusted = map (x: "@${x}") groups;
in {
imports = [
];
@ -31,17 +37,17 @@ in {
};
# allow trainees to deploy
nix.settings.trusted-users = [
"root"
"@skynet-admins-linux"
"@skynet-trainees-linux"
];
nix.settings.trusted-users =
[
"root"
]
++ groups_trusted;
# allow trainees access
services.skynet_ldap_client.groups = [
"skynet-admins-linux"
"skynet-trainees-linux"
];
services.skynet_ldap_client = {
groups = groups;
sudo_groups = groups;
};
skynet_dns.records = [
{