bebop: Fix groups
This commit is contained in:
parent
e33d7efb49
commit
fbad4942fc
5 changed files with 6 additions and 9 deletions
|
@ -71,7 +71,9 @@ in
|
||||||
users = {
|
users = {
|
||||||
# mutableUsers = false;
|
# mutableUsers = false;
|
||||||
|
|
||||||
groups.fin.members = [ "${user}" "hledger" ];
|
groups = {
|
||||||
|
wiki.members = [ "${user}" "etebase-server" "paperless" ];
|
||||||
|
};
|
||||||
|
|
||||||
users = {
|
users = {
|
||||||
root.openssh.authorizedKeys.keys = [
|
root.openssh.authorizedKeys.keys = [
|
||||||
|
@ -80,7 +82,7 @@ in
|
||||||
|
|
||||||
"${user}" = {
|
"${user}" = {
|
||||||
isNormalUser = true;
|
isNormalUser = true;
|
||||||
extraGroups = [ "wheel" "docker" "fin" ];
|
extraGroups = [ "wheel" "docker" ];
|
||||||
openssh.authorizedKeys.keys = [
|
openssh.authorizedKeys.keys = [
|
||||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPLfc2MW5f4Qn1ifAjPPSTRjDST9Bpwn4M8pWvtYrlnY nixos@wsl@hermes"
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPLfc2MW5f4Qn1ifAjPPSTRjDST9Bpwn4M8pWvtYrlnY nixos@wsl@hermes"
|
||||||
];
|
];
|
||||||
|
|
|
@ -1,7 +1,7 @@
|
||||||
{ ... }:
|
{ ... }:
|
||||||
{
|
{
|
||||||
systemd.tmpfiles.rules = [
|
systemd.tmpfiles.rules = [
|
||||||
"f /run/agenix/etebase 0600 etebase-server etebase-server -"
|
"f /run/agenix/etebase 0600 etebase-server wiki -"
|
||||||
];
|
];
|
||||||
|
|
||||||
services = {
|
services = {
|
||||||
|
|
|
@ -44,8 +44,6 @@
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
users.users.hledger.extraGroups = [ "fin" ];
|
|
||||||
|
|
||||||
security.acme = {
|
security.acme = {
|
||||||
acceptTerms = true;
|
acceptTerms = true;
|
||||||
certs = {
|
certs = {
|
||||||
|
|
|
@ -9,7 +9,7 @@ in
|
||||||
{
|
{
|
||||||
users.payas = {
|
users.payas = {
|
||||||
isNormalUser = true;
|
isNormalUser = true;
|
||||||
extraGroups = [ "wheel" "networkmanager" "adbusers" "docker" "libvirtd" "fin" ];
|
extraGroups = [ "wheel" "networkmanager" "adbusers" "docker" "libvirtd" ];
|
||||||
home = "/home/${payas}";
|
home = "/home/${payas}";
|
||||||
description = payas;
|
description = payas;
|
||||||
group = "payas";
|
group = "payas";
|
||||||
|
|
|
@ -26,9 +26,6 @@
|
||||||
PAPERLESS_URL = "https://paperless.bhankas.org";
|
PAPERLESS_URL = "https://paperless.bhankas.org";
|
||||||
PAPERLESS_ALLOWED_HOSTS = "127.0.0.1,bhankas.org";
|
PAPERLESS_ALLOWED_HOSTS = "127.0.0.1,bhankas.org";
|
||||||
PAPERLESS_CSRF_TRUSTED_ORIGINS = "https://paperless.bhankas.org";
|
PAPERLESS_CSRF_TRUSTED_ORIGINS = "https://paperless.bhankas.org";
|
||||||
PAPERLESS_ADMIN_USER = "bruce";
|
|
||||||
PAPERLESS_ADMIN_PASSWORD = "wayne";
|
|
||||||
PAPERLESS_ADMIN_MAIL = "admin@bhankas.org";
|
|
||||||
PAPERLESS_USE_X_FORWARD_HOST = true;
|
PAPERLESS_USE_X_FORWARD_HOST = true;
|
||||||
PAPERLESS_PROXY_SSL_HEADER = "[\"HTTP_XFORWARDED_PROTO\", \"https\"]";
|
PAPERLESS_PROXY_SSL_HEADER = "[\"HTTP_XFORWARDED_PROTO\", \"https\"]";
|
||||||
PAPERLESS_CONSUMER_RECURSIVE = true;
|
PAPERLESS_CONSUMER_RECURSIVE = true;
|
||||||
|
|
Reference in a new issue