motiejus/config
1
Fork 0
Code Packages Releases Activity

deployerbot: fwminex allows vno1

Browse Source
This commit is contained in:
Motiejus Jakštys
2023-09-18 20:49:17 +03:00
parent ceb7fe191e
commit 4973a1cdd4
6 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
modules/services/deployerbot/default.nix
View File

@@ -41,6 +41,7 @@ in {
options.mj.services.deployerbot.follower = with lib.types; {
enable = lib.mkEnableOption "Allow system to be deployed with deployerbot";
sshAllowSubnets = lib.mkOption {type = listOf str;};
publicKey = lib.mkOption {type = str;};
uidgid = lib.mkOption {type = int;};
};
@@ -126,7 +127,7 @@ in {
createHome = true;
uid = cfg.follower.uidgid;
openssh.authorizedKeys.keys = let
restrictedPubKey = "from=\"${myData.subnets.tailscale.sshPattern}\" " + cfg.follower.publicKey;
restrictedPubKey = "from=\"${builtins.concatStringsSep "," cfg.follower.sshAllowSubnets}\" " + cfg.follower.publicKey;
in [restrictedPubKey];
};
};