motiejus/config
1
Fork 0
Code Packages Releases Activity

vno1-oh2: add updaterbot

Browse Source
This commit is contained in:
Motiejus Jakštys 2023-07-24 16:31:38 +03:00
parent aac0ea1fec
commit 71fd71cb6b
4 changed files with 39 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
data.nix
View File

@ -1,4 +1,11 @@
rec { rec {
uidgid = {
motiejus = 1000;
gitea = 995;
updaterbot = 501;
};
people_pubkeys = { people_pubkeys = {
motiejus = "ssh-rsa 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"; motiejus = "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC+qpaaD+FCYPcUU1ONbw/ff5j0xXu5DNvp/4qZH/vOYwG13uDdfI5ISYPs8zNaVcFuEDgNxWorVPwDw4p6+1JwRLlhO4J/5tE1w8Gt6C7y76LRWnp0rCdva5vL3xMozxYIWVOAiN131eyirV2FdOaqTwPy4ouNMmBFbibLQwBna89tbFMG/jwR7Cxt1I6UiYOuCXIocI5YUbXlsXoK9gr5yBRoTjl2OfH2itGYHz9xQCswvatmqrnteubAbkb6IUFYz184rnlVntuZLwzM99ezcG4v8/485gWkotTkOgQIrGNKgOA7UNKpQNbrwdPAMugqfSTo6g8fEvy0Q+6OXdxw5X7en2TJE+BLVaXp4pVMdOAzKF0nnssn64sRhsrUtFIjNGmOWBOR2gGokaJcM6x9R72qxucuG5054pSibs32BkPEg6Qzp+Bh77C3vUmC94YLVg6pazHhLroYSP1xQjfOvXyLxXB1s9rwJcO+s4kqmInft2weyhfaFE0Bjcoc+1/dKuQYfPCPSB//4zvktxTXud80zwWzMy91Q4ucRrHTBz3PrhO8ys74aSGnKOiG3ccD3HbaT0Ff4qmtIwHcAjrnNlINAcH/A2mpi0/2xA7T8WpFnvgtkQbcMF0kEKGnNS5ULZXP/LC8BlLXxwPdqTzvKikkTb661j4PhJhinhVwnQ==";
}; };

22
hosts/hel1-a/configuration.nix
View File

@ -7,7 +7,6 @@
... ...
}: let }: let
turn_cert_dir = "/var/lib/caddy/.local/share/caddy/certificates/acme-v02.api.letsencrypt.org-directory/turn.jakstys.lt"; turn_cert_dir = "/var/lib/caddy/.local/share/caddy/certificates/acme-v02.api.letsencrypt.org-directory/turn.jakstys.lt";
gitea_uidgid = 995;
in { in {
imports = [ imports = [
./hardware-configuration.nix ./hardware-configuration.nix
@ -82,16 +81,21 @@ in {
}; };
users = { users = {
users.git = { users = {
description = "Gitea Service"; git = {
home = "/var/lib/gitea"; description = "Gitea Service";
useDefaultShell = true; home = "/var/lib/gitea";
group = "gitea"; useDefaultShell = true;
isSystemUser = true; group = "gitea";
uid = gitea_uidgid; isSystemUser = true;
uid = myData.uidgid.gitea;
};
}; };
groups.gitea.gid = gitea_uidgid; groups = {
gitea.gid = myData.uidgid.gitea;
};
}; };
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [

18
hosts/vno1-oh2/configuration.nix
View File

@ -47,6 +47,24 @@
}; };
}; };
users = {
users = {
updaterbot = {
description = "Dear Updater Bot";
home = "/var/lib/updaterbot";
useDefaultShell = true;
group = "updaterbot";
isSystemUser = true;
createHome = true;
uid = myData.uidgid.updaterbot;
};
};
groups = {
updaterbot.gid = myData.uidgid.updaterbot;
};
};
services = { services = {
tailscale.enable = true; tailscale.enable = true;

2
modules/base/users/default.nix
View File

@ -32,7 +32,7 @@
{ {
isNormalUser = true; isNormalUser = true;
extraGroups = ["wheel"]; extraGroups = ["wheel"];
uid = 1000; uid = myData.uidgid.motiejus;
openssh.authorizedKeys.keys = [myData.people_pubkeys.motiejus]; openssh.authorizedKeys.keys = [myData.people_pubkeys.motiejus];
} }
// lib.filterAttrs (n: v: v != null) passwd.motiejus or {}; // lib.filterAttrs (n: v: v != null) passwd.motiejus or {};