cleslie/nixfiles
1
0
Fork 0
mirror of https://github.com/callumio/nixfiles.git synced 2026-08-06 20:49:17 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

remove legacy modules folder

Browse source
This commit is contained in:
Callum Leslie 2026-04-22 18:34:34 +01:00
parent 9b48220a2a
commit 262f069d7d
Signed by: cleslie
GPG key ID: D382C4AFEECEAA90
10 changed files with 1 additions and 206 deletions
Download patch file Download diff file Expand all files Collapse all files

74
modules/deploy.nix
View file

@ -1,74 +0,0 @@
{
config,
pkgs,
lib,
...
}:
with lib; let
cfg = config.c.services.remote-deploy;
in {
options.c.services.remote-deploy = {
enable = mkEnableOption "Enable remote deployment with nixinate.";
host = mkOption {
type = types.str;
description = "Hostname to connect to.";
};
user = mkOption {
type = types.str;
default = "deploy";
description = "Username for deploy account.";
};
group = mkOption {
type = types.str;
default = "deploy";
description = "Group for deploy account.";
};
keys = mkOption {
type = types.listOf types.str;
description = "Authorised SSH keys for deployment";
};
port = mkOption {
type = types.port;
default = 22;
description = "SSH port to use.";
};
buildOn = mkOption {
type = types.enum ["local" "remote"];
default = "local";
description = "Where to build the config.";
};
substituteOnTarget = mkOption {
type = types.bool;
default = true;
description = "Substitute closures and paths from remote";
};
};
config = mkIf cfg.enable {
_module.args = {
nixinate = {
inherit (cfg) host buildOn port substituteOnTarget;
sshUser = cfg.user;
};
};
users.groups."${cfg.group}" = {};
users.users."${cfg.user}" = {
isSystemUser = true;
shell = pkgs.bash;
inherit (cfg) group;
openssh.authorizedKeys.keys = cfg.keys;
};
nix.settings.trusted-users = [cfg.user];
security.sudo.extraRules = [
{
groups = [cfg.group];
commands = [
{
command = "ALL";
options = ["NOPASSWD"];
}
];
}
];
};
}