Manage data-access container declaratively
This commit is contained in:
parent
45761cb113
commit
565ee07812
8 changed files with 72 additions and 6 deletions
23
containers/data-access/config.nix
Normal file
23
containers/data-access/config.nix
Normal file
|
@ -0,0 +1,23 @@
|
|||
{ pkgs, ... }: {
|
||||
|
||||
imports = [
|
||||
./config.secret.nix
|
||||
];
|
||||
|
||||
users.users.data = {
|
||||
isNormalUser = true;
|
||||
home = "/home/data";
|
||||
description = "Data Access";
|
||||
uid = 1000;
|
||||
group = "users";
|
||||
};
|
||||
services.openssh = {
|
||||
enable = true;
|
||||
passwordAuthentication = false;
|
||||
permitRootLogin = "no";
|
||||
hostKeys = [
|
||||
{ bits = 4096; path = "/var/secrets/ssh_host_rsa_key"; type = "rsa"; }
|
||||
{ path = "/var/secrets/ssh_host_ed25519_key"; type = "ed25519"; }
|
||||
];
|
||||
};
|
||||
}
|
Loading…
Add table
Add a link
Reference in a new issue