mirror of
https://git.sr.ht/~magic_rb/dotfiles
synced 2024-11-25 17:46:14 +01:00
Add ssh-remote-access
Signed-off-by: magic_rb <magic_rb@redalder.org>
This commit is contained in:
parent
a0f42d9227
commit
39d36d5457
19
nixos/systems/blowhole/ssh-machine-access.nix
Normal file
19
nixos/systems/blowhole/ssh-machine-access.nix
Normal file
|
@ -0,0 +1,19 @@
|
||||||
|
{
|
||||||
|
pkgs,
|
||||||
|
lib,
|
||||||
|
...
|
||||||
|
}: let
|
||||||
|
inherit (lib) getExe';
|
||||||
|
in {
|
||||||
|
users.groups."bot" = {};
|
||||||
|
users.users."bot" = {
|
||||||
|
group = "bot";
|
||||||
|
home = "/var/empty";
|
||||||
|
shell = "${getExe' pkgs.busybox "sh"}";
|
||||||
|
isNormalUser = false;
|
||||||
|
isSystemUser = true;
|
||||||
|
openssh.authorizedKeys.keys = [
|
||||||
|
''restrict,command="echo \"It's working\"" ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFVkFvalffJ/SMjJGG3WPiqCqFygnWzhGUaeALBIoCsJ (none)''
|
||||||
|
];
|
||||||
|
};
|
||||||
|
}
|
Loading…
Reference in a new issue