sora/nixconfig
1
0
Fork 0
Code Issues 2 Pull Requests Actions Releases Activity

Fix ssh

Browse Source
This commit is contained in:
soraefir
2026-05-02 21:00:05 +02:00
parent 0baf9c1800
commit d2e35d3673
1 changed files with 4 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
systems/gateway/default.nix
View File

@@ -1,21 +1,19 @@
{ config, lib, inputs, ... }:
let
allUsers = lib.concatMap (peer: if peer ? users then peer.users else []) config.syscfg.peers;
allUsers = lib.concatMap (peer: if peer.syscfg ? users then peer.syscfg.users else []) config.syscfg.peers;
groupedUsers = lib.groupBy (u: u.username) allUsers;
allowedUsernames = map (u: u.username) config.syscfg.users;
activeUsers = lib.filterAttrs (name: _: lib.elem name allowedUsernames) groupedUsers;
userConfigs = lib.mapAttrs (name: userList: {
isNormalUser = true;
openssh.authorizedKeys.keys = lib.unique (map (u: u.pubssh) userList);
}) groupedUsers;
in {
imports = [ ./hardware.nix ];
services.openssh.enable = true;
services.openssh.ports = [ 422 ];
users.users = lib.mapAttrs (name: userList: {
openssh.authorizedKeys.keys = lib.unique (map (u: u.pubssh) userList);
}) activeUsers // {
}) activeUsers
// {
root = {openssh.authorizedKeys.keys = [];};
};
}