noah/dotfiles
1
0
Fork 0
mirror of https://github.com/nmasur/dotfiles synced 2024-11-23 02:15:38 +00:00
Code Issues Packages Projects Releases Wiki Activity

additional options needed to build aws image

Browse Source
This commit is contained in:
Noah Masur 2022-09-20 12:50:04 +00:00
parent 9e3345ff9b
commit 720a3cc409
2 changed files with 22 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
generators/aws.nix
View File

@ -1,22 +1,31 @@
{ nixpkgs, system, nixos-generators, home-manager, globals, ... }: { nixpkgs, system, nixos-generators, home-manager, globals, ... }:
nixos-generators.nixoGenerate { nixos-generators.nixosGenerate {
inherit system; inherit system;
imports = [ format = "amazon";
globals modules = [
home-manager.nixosModules.home-manager home-manager.nixosModules.home-manager
{ {
user = globals.user;
fullName = globals.fullName;
dotfilesRepo = globals.dotfilesRepo;
gitName = globals.gitName;
gitEmail = globals.gitEmail;
networking.hostName = "sheep"; networking.hostName = "sheep";
gui.enable = false; gui.enable = false;
colorscheme = (import ../../modules/colorscheme/gruvbox); colorscheme = (import ../modules/colorscheme/gruvbox);
passwordHash = passwordHash =
"$6$PZYiMGmJIIHAepTM$Wx5EqTQ5GApzXx58nvi8azh16pdxrN6Qrv1wunDlzveOgawitWzcIxuj76X9V868fsPi/NOIEO8yVXqwzS9UF."; "$6$PZYiMGmJIIHAepTM$Wx5EqTQ5GApzXx58nvi8azh16pdxrN6Qrv1wunDlzveOgawitWzcIxuj76X9V868fsPi/NOIEO8yVXqwzS9UF.";
publicKey = publicKey =
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB+AbmjGEwITk5CK9y7+Rg27Fokgj9QEjgc9wST6MA3s"; "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB+AbmjGEwITk5CK9y7+Rg27Fokgj9QEjgc9wST6MA3s";
# AWS settings require this
permitRootLogin = "prohibit-password";
} }
../hosts/common.nix ../hosts/common.nix
../modules/nixos ../modules/nixos
../modules/services/sshd.nix ../modules/services/sshd.nix
] ++ [
# Required to fix diskSize errors during build
({ ... }: { amazonImage.sizeMB = 16 * 1024; })
]; ];
format = "aws";
} }

10
modules/services/sshd.nix
View File

@ -5,6 +5,11 @@
type = lib.types.str; type = lib.types.str;
description = "Public SSH key authorized for this system."; description = "Public SSH key authorized for this system.";
}; };
permitRootLogin = lib.mkOption {
type = lib.types.str;
description = "Root login settings.";
default = "no";
};
}; };
config = { config = {
@ -15,10 +20,11 @@
gatewayPorts = "no"; gatewayPorts = "no";
forwardX11 = false; forwardX11 = false;
allowSFTP = true; allowSFTP = true;
permitRootLogin = "no"; permitRootLogin = config.permitRootLogin;
}; };
users.users.${config.user}.authorizedKeys.keys = [ config.publicKey ]; users.users.${config.user}.openssh.authorizedKeys.keys =
[ config.publicKey ];
}; };
} }