fix deploy-rs root access somehow
This commit is contained in:
@@ -60,7 +60,7 @@
|
|||||||
deploy.nodes = {
|
deploy.nodes = {
|
||||||
desktop = {
|
desktop = {
|
||||||
hostname = "10.0.0.2";
|
hostname = "10.0.0.2";
|
||||||
sshUser = "root";
|
sshUser = "lilac";
|
||||||
magicRollbackTimeout = 120;
|
magicRollbackTimeout = 120;
|
||||||
profiles.system = {
|
profiles.system = {
|
||||||
user = "root";
|
user = "root";
|
||||||
@@ -71,7 +71,7 @@
|
|||||||
|
|
||||||
vps = {
|
vps = {
|
||||||
hostname = "10.0.0.3";
|
hostname = "10.0.0.3";
|
||||||
sshUser = "root";
|
sshUser = "lilac";
|
||||||
magicRollbackTimeout = 120;
|
magicRollbackTimeout = 120;
|
||||||
profiles.system = {
|
profiles.system = {
|
||||||
user = "root";
|
user = "root";
|
||||||
@@ -82,7 +82,7 @@
|
|||||||
|
|
||||||
backup = {
|
backup = {
|
||||||
hostname = "10.0.0.4";
|
hostname = "10.0.0.4";
|
||||||
sshUser = "root";
|
sshUser = "lilac";
|
||||||
magicRollbackTimeout = 120;
|
magicRollbackTimeout = 120;
|
||||||
profiles.system = {
|
profiles.system = {
|
||||||
user = "root";
|
user = "root";
|
||||||
|
|||||||
@@ -8,6 +8,8 @@
|
|||||||
};
|
};
|
||||||
users.groups.lilac = {};
|
users.groups.lilac = {};
|
||||||
|
|
||||||
|
nix.settings.trusted-users = [ "root" "lilac" ];
|
||||||
|
|
||||||
programs.zsh.enable = true;
|
programs.zsh.enable = true;
|
||||||
users.users.lilac.shell = pkgs.zsh;
|
users.users.lilac.shell = pkgs.zsh;
|
||||||
security.sudo.wheelNeedsPassword = false;
|
security.sudo.wheelNeedsPassword = false;
|
||||||
|
|||||||
+1
-4
@@ -9,7 +9,7 @@
|
|||||||
services.openssh = {
|
services.openssh = {
|
||||||
enable = true;
|
enable = true;
|
||||||
settings = {
|
settings = {
|
||||||
PermitRootLogin = "prohibit-password";
|
PermitRootLogin = "no";
|
||||||
PasswordAuthentication = false;
|
PasswordAuthentication = false;
|
||||||
KbdInteractiveAuthentication = false;
|
KbdInteractiveAuthentication = false;
|
||||||
};
|
};
|
||||||
@@ -22,7 +22,4 @@
|
|||||||
users.users.lilac.openssh.authorizedKeys.keys = [
|
users.users.lilac.openssh.authorizedKeys.keys = [
|
||||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE6kdpZqaqtyfGVNRxpA24sw37MGpXV/NUaALTEt98EK lilac@laptop"
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE6kdpZqaqtyfGVNRxpA24sw37MGpXV/NUaALTEt98EK lilac@laptop"
|
||||||
];
|
];
|
||||||
users.users.root.openssh.authorizedKeys.keys = [
|
|
||||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE6kdpZqaqtyfGVNRxpA24sw37MGpXV/NUaALTEt98EK lilac@laptop"
|
|
||||||
];
|
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user