feat: Change the remotebuild user to a build only user instead of a

regular user
This commit is contained in:
uttarayan21
2025-02-01 06:18:38 +05:30
parent c2f20dccd0
commit c655a56242
5 changed files with 27 additions and 15 deletions

View File

@@ -30,7 +30,7 @@
settings = {
auto-optimise-store = true;
extra-experimental-features = "nix-command flakes auto-allocate-uids";
trusted-users = ["root" "servius" "fs0c131y"];
trusted-users = ["root" "fs0c131y" "remotebuilder"];
};
extraOptions = ''
build-users-group = nixbld
@@ -54,7 +54,7 @@
};
users.users.remotebuilder = {
isNormalUser = true;
openssh.authorizedKeys.keyFiles = [../../secrets/remotebuilder.pub];
openssh.authorizedKeys.keyFiles = [../../secrets/id_ed25519.pub];
};
users.groups.media = {};