Skynet/nixos
6
1
Fork 0
Code Issues 43 Pull requests 1 Projects Releases Packages Wiki Activity Actions

feat: move off of using root for deployment

Browse source
This commit is contained in:
silver 2023-09-30 23:18:14 +01:00
parent c87fec1a65
commit 165c4645bf
14 changed files with 18 additions and 13 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
applications/ldap/client.nix
View file

@ -69,6 +69,11 @@ in {
} }
]; ];
nix.settings.trusted-users = [
"root"
"@skynet-admins-linux"
];
# give users a home dir # give users a home dir
security.pam.services.sshd.makeHomeDir = true; security.pam.services.sshd.makeHomeDir = true;

2
machines/agentjones.nix
View file

@ -27,7 +27,7 @@ in {
deployment = { deployment = {
targetHost = hostname; targetHost = hostname;
targetPort = 22; targetPort = 22;
targetUser = "root"; targetUser = null;
# somehow ssh from runner to this fails # somehow ssh from runner to this fails
tags = ["active-firewall"]; tags = ["active-firewall"];

2
machines/earth.nix
View file

@ -26,7 +26,7 @@ in {
deployment = { deployment = {
targetHost = ip_pub; targetHost = ip_pub;
targetPort = 22; targetPort = 22;
targetUser = "root"; targetUser = null;
tags = ["active-core"]; tags = ["active-core"];
}; };

2
machines/galatea.nix
View file

@ -27,7 +27,7 @@ in {
deployment = { deployment = {
targetHost = hostname; targetHost = hostname;
targetPort = 22; targetPort = 22;
targetUser = "root"; targetUser = null;
tags = ["active"]; tags = ["active"];
}; };

2
machines/gir.nix
View file

@ -27,7 +27,7 @@ in {
deployment = { deployment = {
targetHost = hostname; targetHost = hostname;
targetPort = 22; targetPort = 22;
targetUser = "root"; targetUser = null;
tags = ["active-core"]; tags = ["active-core"];
}; };

2
machines/glados.nix
View file

@ -27,7 +27,7 @@ in {
deployment = { deployment = {
targetHost = hostname; targetHost = hostname;
targetPort = 22; targetPort = 22;
targetUser = "root"; targetUser = null;
tags = ["active-gitlab"]; tags = ["active-gitlab"];
}; };

2
machines/kitt.nix
View file

@ -28,7 +28,7 @@ in {
deployment = { deployment = {
targetHost = hostname; targetHost = hostname;
targetPort = 22; targetPort = 22;
targetUser = "root"; targetUser = null;
tags = ["active-core"]; tags = ["active-core"];
}; };

2
machines/neuromancer.nix
View file

@ -37,7 +37,7 @@ in {
deployment = { deployment = {
targetHost = hostname; targetHost = hostname;
targetPort = 22; targetPort = 22;
targetUser = "root"; targetUser = null;
tags = ["active-core"]; tags = ["active-core"];
}; };

2
machines/optimus.nix
View file

@ -27,7 +27,7 @@ in {
deployment = { deployment = {
targetHost = hostname; targetHost = hostname;
targetPort = 22; targetPort = 22;
targetUser = "root"; targetUser = null;
tags = ["active"]; tags = ["active"];
}; };

2
machines/retired/ash.nix
View file

@ -30,7 +30,7 @@ in {
deployment = { deployment = {
targetHost = hostname; targetHost = hostname;
targetPort = 22; targetPort = 22;
targetUser = "root"; targetUser = null;
}; };
# these two are to be able to add the rules for firewall and dns # these two are to be able to add the rules for firewall and dns

2
machines/skynet.nix
View file

@ -28,7 +28,7 @@ in {
deployment = { deployment = {
targetHost = ip_pub; targetHost = ip_pub;
targetPort = 22; targetPort = 22;
targetUser = "root"; targetUser = null;
# this one is manually deployed # this one is manually deployed
tags = ["active-ext"]; tags = ["active-ext"];

2
machines/vendetta.nix
View file

@ -27,7 +27,7 @@ in {
deployment = { deployment = {
targetHost = ip_pub; targetHost = ip_pub;
targetPort = 22; targetPort = 22;
targetUser = "root"; targetUser = null;
tags = ["active-dns" "dns"]; tags = ["active-dns" "dns"];
}; };

2
machines/vigil.nix
View file

@ -24,7 +24,7 @@ in {
deployment = { deployment = {
targetHost = ip_pub; targetHost = ip_pub;
targetPort = 22; targetPort = 22;
targetUser = "root"; targetUser = null;
tags = ["active-dns" "dns"]; tags = ["active-dns" "dns"];
}; };

2
machines/wheatly.nix
View file

@ -26,7 +26,7 @@ in {
deployment = { deployment = {
targetHost = hostname; targetHost = hostname;
targetPort = 22; targetPort = 22;
targetUser = "root"; targetUser = null;
tags = ["active-gitlab"]; tags = ["active-gitlab"];
}; };