fix deploy-rs root access somehow

This commit is contained in:
2026-09-26 17:46:20 -04:00
parent be529429a8
commit 7000c48629
3 changed files with 6 additions and 7 deletions
+3 -3
View File
@@ -60,7 +60,7 @@
deploy.nodes = { deploy.nodes = {
desktop = { desktop = {
hostname = "10.0.0.2"; hostname = "10.0.0.2";
sshUser = "root"; sshUser = "lilac";
magicRollbackTimeout = 120; magicRollbackTimeout = 120;
profiles.system = { profiles.system = {
user = "root"; user = "root";
@@ -71,7 +71,7 @@
vps = { vps = {
hostname = "10.0.0.3"; hostname = "10.0.0.3";
sshUser = "root"; sshUser = "lilac";
magicRollbackTimeout = 120; magicRollbackTimeout = 120;
profiles.system = { profiles.system = {
user = "root"; user = "root";
@@ -82,7 +82,7 @@
backup = { backup = {
hostname = "10.0.0.4"; hostname = "10.0.0.4";
sshUser = "root"; sshUser = "lilac";
magicRollbackTimeout = 120; magicRollbackTimeout = 120;
profiles.system = { profiles.system = {
user = "root"; user = "root";
+2
View File
@@ -8,6 +8,8 @@
}; };
users.groups.lilac = {}; users.groups.lilac = {};
nix.settings.trusted-users = [ "root" "lilac" ];
programs.zsh.enable = true; programs.zsh.enable = true;
users.users.lilac.shell = pkgs.zsh; users.users.lilac.shell = pkgs.zsh;
security.sudo.wheelNeedsPassword = false; security.sudo.wheelNeedsPassword = false;
+1 -4
View File
@@ -9,7 +9,7 @@
services.openssh = { services.openssh = {
enable = true; enable = true;
settings = { settings = {
PermitRootLogin = "prohibit-password"; PermitRootLogin = "no";
PasswordAuthentication = false; PasswordAuthentication = false;
KbdInteractiveAuthentication = false; KbdInteractiveAuthentication = false;
}; };
@@ -22,7 +22,4 @@
users.users.lilac.openssh.authorizedKeys.keys = [ users.users.lilac.openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE6kdpZqaqtyfGVNRxpA24sw37MGpXV/NUaALTEt98EK lilac@laptop" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE6kdpZqaqtyfGVNRxpA24sw37MGpXV/NUaALTEt98EK lilac@laptop"
]; ];
users.users.root.openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE6kdpZqaqtyfGVNRxpA24sw37MGpXV/NUaALTEt98EK lilac@laptop"
];
} }