gensokyo-zone/infrastructure
1
0
Fork 0
mirror of https://github.com/gensokyo-zone/infrastructure.git synced 2026-02-09 12:29:19 -08:00
Code Issues Projects Releases Packages Wiki Activity Actions

profiles/base: further wheel allows

Browse source
This commit is contained in:
kat witch 2021-09-09 20:46:41 +01:00
parent 639a6fa7bb
commit 9bca2d6940
No known key found for this signature in database
GPG key ID: 1B477797DCA5EC72
3 changed files with 10 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

7
config/hosts/daiyousei.nix
View file

@ -22,13 +22,6 @@
};
};
network = {
yggdrasil = {
enable = true;
pubkey = "89771aa2f15fce6bbc3548f95be360cf59657d299837b10adf53944b54e8f121";
};
};
services.nginx.virtualHosts =
let
splashy = pkgs.host-splash-site config.networking.hostName;

9
config/profiles/base/access.nix
View file

@ -3,11 +3,20 @@
{
security.sudo.wheelNeedsPassword = lib.mkForce false;
security.polkit.extraConfig = ''
polkit.addRule(function(action, subject) {
if (subject.isInGroup("wheel")) {
return polkit.Result.YES;
}
});
'';
imports = with meta; [
users.kat.base
];
users.users.root = {
shell = pkgs.zsh;
hashedPassword =
"$6$i28yOXoo$/WokLdKds5ZHtJHcuyGrH2WaDQQk/2Pj0xRGLgS8UcmY2oMv3fw2j/85PRpsJJwCB2GBRYRK5LlvdTleHd3mB.";
openssh.authorizedKeys.keys = with pkgs.lib;

2
config/profiles/hardware/oracle/common.nix
View file

@ -92,7 +92,7 @@ in
in
{
enable = true;
nixos.ipv6.address = mkIf (tf.state.resources ? ${tf.resources.${config.networking.hostName}.out.reference}) addr_ipv6_nix;
nixos.ipv6.address = mkIf tf.state.enable addr_ipv6_nix;
tf.ipv6.address = tf.resources."${config.networking.hostName}_ipv6".refAttr "ip_address";
};
};