Smaller improvements + password hashing

This commit is contained in:
hodasemi 2025-04-23 10:02:17 +02:00
parent 9d8b5c5dc2
commit afa822b777
5 changed files with 13 additions and 1 deletions

3
.gitignore vendored
View file

@ -62,3 +62,6 @@ $RECYCLE.BIN/
*.lnk *.lnk
# End of https://www.toptal.com/developers/gitignore/api/visualstudiocode,windows,linux # End of https://www.toptal.com/developers/gitignore/api/visualstudiocode,windows,linux
*.pw

5
execute.sh Normal file
View file

@ -0,0 +1,5 @@
#!/bin/bash
openssl passwd -6 $1 > dev_user_password.pw
colmena apply -f colmena.nix

View file

@ -7,7 +7,7 @@
home = "/home/dev"; home = "/home/dev";
description = "User used to manually connect to this system (e.g. for maintenance)"; description = "User used to manually connect to this system (e.g. for maintenance)";
extraGroups = [ "docker" "wheel" ]; extraGroups = [ "docker" "wheel" ];
hashesPassword = "TODO"; hashedPasswordFile = "dev_user_password.pw";
} }
}; };
} }

View file

@ -2,5 +2,6 @@
{ {
virtualisation.docker = { virtualisation.docker = {
enable = true; enable = true;
enableOnBoot = true;
}; };
} }

View file

@ -9,6 +9,9 @@
openssh = { openssh = {
enable = true; enable = true;
ports = [ 23 ]; ports = [ 23 ];
settings = {
AllowUsers = [ "dev" ];
};
}; };
}; };
} }