nki/nix-home
1
0
Fork 0
Code Issues Pull requests 1 Packages Projects Releases Wiki Activity

Restrict connection source for keys

Browse source
This commit is contained in:
Natsu Kagami 2024-08-17 17:41:28 +02:00
parent 0fe0bb0367
commit 28d891f4e2
Signed by: nki
GPG key ID: 55A032EB38B49ADB
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
modules/services/nix-build-farm/default.nix
View file

@ -47,7 +47,7 @@ in
description = "Nix build farm user";
group = build-user;
isNormalUser = true;
openssh.authorizedKeys.keys = lib.mapAttrsToList (_: host: host.pubKey) otherHosts;
openssh.authorizedKeys.keys = lib.mapAttrsToList (_: host: ''from="${host.host}" ${host.pubKey}'') otherHosts;
};
groups.${build-user} = { };
};