jet/extremist-software
jet/extremist-software
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: add jet as a trusted user

Browse source
This commit is contained in:
Jet 2026-03-23 16:10:33 -07:00
parent 9b5a32e04b
commit b41c85b161
No known key found for this signature in database
2 changed files with 14 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

13
configuration.nix
View file

@ -67,6 +67,14 @@
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE40ISu3ydCqfdpb26JYD5cIN0Fu0id/FDS+xjB5zpqu" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE40ISu3ydCqfdpb26JYD5cIN0Fu0id/FDS+xjB5zpqu"
]; ];
users.users.jet = {
isNormalUser = true;
extraGroups = [ "wheel" ];
openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE40ISu3ydCqfdpb26JYD5cIN0Fu0id/FDS+xjB5zpqu"
];
};
# SSH - Secure it # SSH - Secure it
services.openssh = { services.openssh = {
enable = true; enable = true;
@ -120,8 +128,13 @@
"nix-command" "nix-command"
"flakes" "flakes"
]; ];
nix.settings.trusted-users = [
"root"
"jet"
];
nix.settings.max-jobs = "auto"; nix.settings.max-jobs = "auto";
nix.settings.cores = 0; nix.settings.cores = 0;
security.sudo.wheelNeedsPassword = false;
services.postgresql.package = pkgs.postgresql_15; services.postgresql.package = pkgs.postgresql_15;
nixpkgs.config.allowUnfree = true; # Allow unfree packages (Minecraft, etc.) nixpkgs.config.allowUnfree = true; # Allow unfree packages (Minecraft, etc.)

2
flake.nix
View file

@ -51,7 +51,7 @@
let let
pkgs = nixpkgs.legacyPackages.x86_64-linux; pkgs = nixpkgs.legacyPackages.x86_64-linux;
deploy = pkgs.writeShellScriptBin "nhs" '' deploy = pkgs.writeShellScriptBin "nhs" ''
nh os switch --hostname extremist-software --target-host root@extremist-software path:. "$@" nh os switch --hostname extremist-software --target-host jet@extremist-software path:. "$@"
''; '';
check-secrets = pkgs.writeShellScriptBin "check-secrets" '' check-secrets = pkgs.writeShellScriptBin "check-secrets" ''
set -euo pipefail set -euo pipefail