Add extra user for pipeline access

This commit is contained in:
Michael Huebner 2025-07-18 10:55:52 +02:00
parent 90d338e934
commit 8b2f3113d2

View file

@ -23,7 +23,7 @@ in
./shared/ssh.nix ./shared/ssh.nix
]; ];
services.openssh.settings.AllowUsers = [ "pipeline" ]; services.openssh.settings.AllowUsers = [ "pipeline" "david" ];
users.users = { users.users = {
# connection only via ssh key # connection only via ssh key
@ -36,6 +36,16 @@ in
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPB9tvEWgxrhK0pUs9RJrdreNX1EBxJ/nrz57qzP48Uk michaelh@michael-node" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPB9tvEWgxrhK0pUs9RJrdreNX1EBxJ/nrz57qzP48Uk michaelh@michael-node"
]; ];
}; };
# connection only via ssh key
david = {
isNormalUser = true;
home = "/home/david";
description = "User used by forgejo runners to connect to this system for david";
extraGroups = [ "docker" ];
openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICfwHVorfUjbCXmJeVNtb2uP4FHcRI6ITpQDjnIeb7sI root@nixos"
];
};
}; };
networking = { networking = {