Compare commits
4 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| b10d22bd57 | |||
| 19027e3b48 | |||
| 08ae2764e0 | |||
| 1cf710fe5b |
@@ -6,7 +6,7 @@ on:
|
||||
|
||||
jobs:
|
||||
flake-check:
|
||||
runs-on: nix
|
||||
runs-on: nixos
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
- run: nix flake check
|
||||
|
||||
@@ -5,7 +5,7 @@ on:
|
||||
|
||||
jobs:
|
||||
deploy:
|
||||
runs-on: nix
|
||||
runs-on: nixos
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
|
||||
|
||||
@@ -14,3 +14,4 @@ secrets.env
|
||||
# age private keys — never commit (public keys live in .sops.yaml)
|
||||
*.age
|
||||
keys.txt
|
||||
data
|
||||
@@ -13,7 +13,8 @@
|
||||
isNormalUser = true;
|
||||
extraGroups = [ "wheel" ];
|
||||
openssh.authorizedKeys.keys = [
|
||||
# TODO: paste the Gitea runner's deploy ed25519 pubkey here
|
||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJuB+MbW/YuXYGZ/lm6dp+aHJ1YqfaEkiqgj/Z6+cdd0 me@larsnolden.com" # developer machines key
|
||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB9LFaFbro5jU9jG0ZNn66FO61gniKfi865jS6TnZ+SU deploy" # deployment nodes key
|
||||
];
|
||||
};
|
||||
security.sudo.wheelNeedsPassword = false;
|
||||
|
||||
Reference in New Issue
Block a user