Restrict connection source for keys

This commit is contained in:
Natsu Kagami 2024-08-17 17:41:28 +02:00
parent 0fe0bb0367
commit 28d891f4e2
Signed by: nki
GPG key ID: 55A032EB38B49ADB

View file

@ -47,7 +47,7 @@ in
description = "Nix build farm user"; description = "Nix build farm user";
group = build-user; group = build-user;
isNormalUser = true; isNormalUser = true;
openssh.authorizedKeys.keys = lib.mapAttrsToList (_: host: host.pubKey) otherHosts; openssh.authorizedKeys.keys = lib.mapAttrsToList (_: host: ''from="${host.host}" ${host.pubKey}'') otherHosts;
}; };
groups.${build-user} = { }; groups.${build-user} = { };
}; };