From 997561f817794d045d558bff16f3d6d6fd3e57bd Mon Sep 17 00:00:00 2001 From: teutat3s Date: Sun, 29 Jan 2023 17:39:34 +0100 Subject: [PATCH] caddy: add to hakkonaut group Add public SSH key to hakkonaut user --- hosts/flora-6/caddy.nix | 1 + hosts/flora-6/flora-6.nix | 6 +++++- 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/hosts/flora-6/caddy.nix b/hosts/flora-6/caddy.nix index 03bea7e9..cd90d4ef 100644 --- a/hosts/flora-6/caddy.nix +++ b/hosts/flora-6/caddy.nix @@ -7,6 +7,7 @@ }: { services.caddy = { enable = lib.mkForce true; + group = "hakkonaut"; email = "admins@pub.solar"; globalConfig = lib.mkForce ""; virtualHosts = { diff --git a/hosts/flora-6/flora-6.nix b/hosts/flora-6/flora-6.nix index 5f324077..f25f89dc 100644 --- a/hosts/flora-6/flora-6.nix +++ b/hosts/flora-6/flora-6.nix @@ -55,13 +55,17 @@ in { } ]; + # Machine user for CI pipelines users.users.hakkonaut = { description = "CI and automation user"; home = "/var/nix/iso-cache"; useDefaultShell = true; - uid = 995; + uid = 998; group = "hakkonaut"; isSystemUser = true; + openssh.authorizedKeys.keys = [ + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGP5MvCwNRtCcP1pSDrn0XZTNlpOqYnjHDm9/OI4hECW hakkonaut@flora-6" + ]; }; users.groups.hakkonaut = {};