deployerbot-follower: also allow from localhost
This commit is contained in:
@@ -142,7 +142,17 @@
|
|||||||
createHome = true;
|
createHome = true;
|
||||||
uid = cfg.uidgid;
|
uid = cfg.uidgid;
|
||||||
openssh.authorizedKeys.keys = map (
|
openssh.authorizedKeys.keys = map (
|
||||||
k: ''from="${builtins.concatStringsSep "," cfg.sshAllowSubnets}" '' + k
|
k:
|
||||||
|
''from="${
|
||||||
|
builtins.concatStringsSep "," (
|
||||||
|
cfg.sshAllowSubnets
|
||||||
|
++ [
|
||||||
|
"::1"
|
||||||
|
"127.0.0.1"
|
||||||
|
]
|
||||||
|
)
|
||||||
|
}" ''
|
||||||
|
+ k
|
||||||
) cfg.publicKeys;
|
) cfg.publicKeys;
|
||||||
};
|
};
|
||||||
users.groups.deployerbot-follower.gid = cfg.uidgid;
|
users.groups.deployerbot-follower.gid = cfg.uidgid;
|
||||||
|
|||||||
Reference in New Issue
Block a user