more comments

This commit is contained in:
Kiara Grouwstra 2025-04-17 13:52:46 +02:00
parent 06b7cc5ca2
commit bb94ae3e7d
Signed by: kiara
SSH key fingerprint: SHA256:COspvLoLJ5WC5rFb9ZDe5urVCkK4LJZOsjfF4duRJFU
2 changed files with 3 additions and 3 deletions

View file

@ -1,3 +1,4 @@
# TODO: could (part of) this be generated somehow?
{
lib,
...

View file

@ -10,7 +10,7 @@ let
inherit (lib.strings) removeSuffix;
secretsPrefix = ../secrets;
secrets = import (secretsPrefix + "/secrets.nix");
secrets = import "${secretsPrefix}/secrets.nix";
keys = import ../keys;
in
@ -35,8 +35,7 @@ in
}
) secrets;
## FIXME: Remove direct root authentication once the NixOps4 NixOS provider
## supports users with password-less sudo.
## FIXME: switch root authentication to users with password-less sudo, see #24
users.users.root.openssh.authorizedKeys.keys = attrValues keys.contributors ++ [
# allow our panel vm access to the test machines
keys.panel