hydra build: correction du type d'user
This commit is contained in:
@@ -23,6 +23,9 @@ in
|
|||||||
# Lancement de dbus pour les utilisateurs
|
# Lancement de dbus pour les utilisateurs
|
||||||
services.dbus.socketActivated = true;
|
services.dbus.socketActivated = true;
|
||||||
|
|
||||||
|
# NixOS Hardening
|
||||||
|
security.grsecurity.enable = true;
|
||||||
|
|
||||||
# Paquets
|
# Paquets
|
||||||
environment = {
|
environment = {
|
||||||
systemPackages = with pkgs; [
|
systemPackages = with pkgs; [
|
||||||
|
|||||||
@@ -20,9 +20,10 @@ mkIf cfg.hydra-builder {
|
|||||||
nix.gc.automatic = true;
|
nix.gc.automatic = true;
|
||||||
|
|
||||||
users.users."hydrabld" = {
|
users.users."hydrabld" = {
|
||||||
description = "Execution des job hydra";
|
description = "Execution des jobs hydra";
|
||||||
group = "nixbld";
|
group = "nixbld";
|
||||||
isNormalUser = false;
|
extraGroups = [ "nixbld" ];
|
||||||
|
isNormalUser = true;
|
||||||
|
|
||||||
openssh.authorizedKeys.keys = [
|
openssh.authorizedKeys.keys = [
|
||||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGYpjcWJCf8dXpv2LmoIaNVbwZXEC50QUU6Az+lqeD89 hydra radx"
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGYpjcWJCf8dXpv2LmoIaNVbwZXEC50QUU6Az+lqeD89 hydra radx"
|
||||||
|
|||||||
Reference in New Issue
Block a user