This commit is contained in:
XenGi 2026-02-13 19:06:13 +01:00
parent 5807b563a1
commit ff5cb096de
Signed by: xengi
SSH key fingerprint: SHA256:jxWM2RTHvxxcncXycwwWkP7HCWb4VREN05UGJTbIPZg
2 changed files with 19 additions and 14 deletions

View file

@ -1,16 +1,21 @@
{ pkgs, ... }:
{
users.users.deploy = {
description = "deploys static websites from forgejo";
shell = pkgs.nologin;
packages = [
pkgs.rsync
];
openssh.authorizedKeys.keys = [
"command='rsync --server --daemon . /srv/http/www/',restrict ssh-ed25519 AAAAB3NzaC1yc2EAAAADAQABAAABAQCy... git.berlin.ccc.de/cccb/www"
];
#extraGroups = ["nginx"];
users = {
users.deploy = {
description = "deploys static websites from forgejo";
shell = "/run/current-system/sw/bin/nologin";
isSystemUser = true;
group = "deploy";
packages = [
pkgs.rsync
];
openssh.authorizedKeys.keys = [
"command='rsync --server --daemon . /srv/http/www/',restrict ssh-ed25519 AAAAB3NzaC1yc2EAAAADAQABAAABAQCy... git.berlin.ccc.de/cccb/www"
];
#extraGroups = ["nginx"];
};
groups.deploy = {};
};
}