Compare commits
4 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| b10d22bd57 | |||
| 19027e3b48 | |||
| 08ae2764e0 | |||
| 1cf710fe5b |
@@ -6,7 +6,7 @@ on:
|
|||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
flake-check:
|
flake-check:
|
||||||
runs-on: nix
|
runs-on: nixos
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@v4
|
- uses: actions/checkout@v4
|
||||||
- run: nix flake check
|
- run: nix flake check
|
||||||
|
|||||||
@@ -5,7 +5,7 @@ on:
|
|||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
deploy:
|
deploy:
|
||||||
runs-on: nix
|
runs-on: nixos
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@v4
|
- uses: actions/checkout@v4
|
||||||
|
|
||||||
|
|||||||
@@ -14,3 +14,4 @@ secrets.env
|
|||||||
# age private keys — never commit (public keys live in .sops.yaml)
|
# age private keys — never commit (public keys live in .sops.yaml)
|
||||||
*.age
|
*.age
|
||||||
keys.txt
|
keys.txt
|
||||||
|
data
|
||||||
@@ -13,7 +13,8 @@
|
|||||||
isNormalUser = true;
|
isNormalUser = true;
|
||||||
extraGroups = [ "wheel" ];
|
extraGroups = [ "wheel" ];
|
||||||
openssh.authorizedKeys.keys = [
|
openssh.authorizedKeys.keys = [
|
||||||
# TODO: paste the Gitea runner's deploy ed25519 pubkey here
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJuB+MbW/YuXYGZ/lm6dp+aHJ1YqfaEkiqgj/Z6+cdd0 me@larsnolden.com" # developer machines key
|
||||||
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB9LFaFbro5jU9jG0ZNn66FO61gniKfi865jS6TnZ+SU deploy" # deployment nodes key
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
security.sudo.wheelNeedsPassword = false;
|
security.sudo.wheelNeedsPassword = false;
|
||||||
|
|||||||
Reference in New Issue
Block a user