more comments

This commit is contained in:
Kiara Grouwstra 2025-04-17 13:52:46 +02:00
parent 4c6fa980f7
commit 428b1d4e3a
2 changed files with 3 additions and 3 deletions

View file

@ -1,3 +1,4 @@
# TODO: could (part of) this be generated somehow?
{ {
lib, lib,
... ...

View file

@ -10,7 +10,7 @@ let
inherit (lib.strings) removeSuffix; inherit (lib.strings) removeSuffix;
secretsPrefix = ../secrets; secretsPrefix = ../secrets;
secrets = import (secretsPrefix + "/secrets.nix"); secrets = import "${secretsPrefix}/secrets.nix";
keys = import ../keys; keys = import ../keys;
in in
@ -35,8 +35,7 @@ in
} }
) secrets; ) secrets;
## FIXME: Remove direct root authentication once the NixOps4 NixOS provider ## FIXME: switch root authentication to users with password-less sudo, see #24
## supports users with password-less sudo.
users.users.root.openssh.authorizedKeys.keys = attrValues keys.contributors ++ [ users.users.root.openssh.authorizedKeys.keys = attrValues keys.contributors ++ [
# allow our panel vm access to the test machines # allow our panel vm access to the test machines
keys.panel keys.panel