From 5fae69b391eae9c40c5cb8b87bfcbff3fe3fbfab Mon Sep 17 00:00:00 2001 From: Ivan Malison Date: Mon, 8 Apr 2024 05:49:38 +0000 Subject: [PATCH] [NixOS] Gitea secret can access syncthing user --- nixos/keys.nix | 1 + nixos/users.nix | 1 + 2 files changed, 2 insertions(+) diff --git a/nixos/keys.nix b/nixos/keys.nix index 88455d23..7bcedfa9 100644 --- a/nixos/keys.nix +++ b/nixos/keys.nix @@ -1,4 +1,5 @@ rec { + giteaSecret = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHRNHlKPGVnOATsbnkPccyK+C15TWGKbBwqNKt0UcQ81 imalison@adele"; hostKeys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG3UqIYs/NY0okKuiIO+dU2OM7A8vv3b6//GedagvLoX ryzen-shine.local" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINFbM1sL/vlDhrqPV1OMIGi4dKG0tMKhWSXx95ccbfyM biskcomp.local" diff --git a/nixos/users.nix b/nixos/users.nix index 119f1bfe..57e8c90c 100644 --- a/nixos/users.nix +++ b/nixos/users.nix @@ -27,6 +27,7 @@ in extraGroups = [ "syncthing" "wheel" ]; home = "/var/lib/syncthing"; createHome = true; + openssh.authorizedKeys.keys = [giteaSecret]; }; ivanm = userDefaults // { extraGroups = extraGroupsWithWheel;