grace/dots

dotfiles/nix configs

git clone https://git.gae.moe/grace/dots

Grace Yoderi gotta stop doing these massive changesb70d9f9

main
branchesidkmainvulcanwafrn-testingall refs →
500 B19 linesraw
1{ pkgs, ... }:
2
3let
4  certificateAuthority = builtins.replaceStrings [ "\n" ] [ "" ] (builtins.readFile ../ssh-ca.pub);
5in
6{
7  users.users.builder = {
8    isNormalUser = true;
9    description = "Nix remote build account";
10    home = "/home/builder";
11    createHome = true;
12    shell = pkgs.bashInteractive;
13    openssh.authorizedKeys.keys = [
14      "cert-authority,principals=\"t:server,t:human,t:build\",restrict ${certificateAuthority}"
15    ];
16  };
17
18  nix.settings.trusted-users = [ "builder" ];
19}