nyancat/flake
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

hosts/blacksteel: use colmena

Browse source
This commit is contained in:
Guanran Wang 2024-06-05 17:50:46 +08:00
parent acb0f46834
commit b6826c238e
Signed by: nyancat
GPG key ID: 91F97D9ED12639CF
3 changed files with 27 additions and 14 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
flake.nix
View file

@ -224,7 +224,12 @@
"lightsail-tokyo" = {
imports = [./hosts/lightsail-tokyo];
deployment.targetHost = "ny4.dev";
deployment.targetHost = "tyo0.ny4.dev";
};
"blacksteel" = {
imports = [./hosts/blacksteel];
deployment.targetHost = "blacksteel"; # thru tailscale
};
};
});

2
hosts/blacksteel/default.nix
View file

@ -23,6 +23,8 @@
time.timeZone = "Asia/Shanghai";
system.stateVersion = "23.11";
services.openssh.settings.PermitRootLogin = "prohibit-password";
######## Secrets
sops = {
secrets = builtins.mapAttrs (_name: value: value // {sopsFile = ./secrets.yaml;}) {

32
nixos/profiles/common/core/default.nix
View file

@ -73,19 +73,25 @@
"[ 5.996722] amdgpu 0000:67:00.0: Fatal error during GPU init"}
'';
users.users."guanranwang" = {
isNormalUser = true;
description = "Guanran Wang";
hashedPasswordFile = config.sops.secrets."hashed-passwd".path;
shell = pkgs.fish;
extraGroups = [
"wheel"
"nix-access-tokens"
];
openssh.authorizedKeys.keys = [
# same as git signing
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMmd/uqiBahzKcKMJ+gT3dkUIdrWQgudspsDchDlx1E/ guanran928@outlook.com"
];
users.users = rec {
"guanranwang" = {
isNormalUser = true;
description = "Guanran Wang";
hashedPasswordFile = config.sops.secrets."hashed-passwd".path;
shell = pkgs.fish;
extraGroups = [
"wheel"
"nix-access-tokens"
];
openssh.authorizedKeys.keys = [
# same as git signing
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMmd/uqiBahzKcKMJ+gT3dkUIdrWQgudspsDchDlx1E/ guanran928@outlook.com"
];
};
"root" = {
openssh.authorizedKeys.keys = guanranwang.openssh.authorizedKeys.keys;
};
};
programs.dconf.enable = true;