mirror of
https://git.sr.ht/~magic_rb/dotfiles
synced 2024-11-25 09:36:14 +01:00
Add ssh-remote-access
Signed-off-by: magic_rb <magic_rb@redalder.org>
This commit is contained in:
parent
a0f42d9227
commit
39d36d5457
19
nixos/systems/blowhole/ssh-machine-access.nix
Normal file
19
nixos/systems/blowhole/ssh-machine-access.nix
Normal file
|
@ -0,0 +1,19 @@
|
|||
{
|
||||
pkgs,
|
||||
lib,
|
||||
...
|
||||
}: let
|
||||
inherit (lib) getExe';
|
||||
in {
|
||||
users.groups."bot" = {};
|
||||
users.users."bot" = {
|
||||
group = "bot";
|
||||
home = "/var/empty";
|
||||
shell = "${getExe' pkgs.busybox "sh"}";
|
||||
isNormalUser = false;
|
||||
isSystemUser = true;
|
||||
openssh.authorizedKeys.keys = [
|
||||
''restrict,command="echo \"It's working\"" ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFVkFvalffJ/SMjJGG3WPiqCqFygnWzhGUaeALBIoCsJ (none)''
|
||||
];
|
||||
};
|
||||
}
|
Loading…
Reference in a new issue