bebop: Fix groups

This commit is contained in:
Payas Relekar 2023-07-02 13:38:38 +05:30
parent e33d7efb49
commit fbad4942fc
5 changed files with 6 additions and 9 deletions

View file

@ -71,7 +71,9 @@ in
users = { users = {
# mutableUsers = false; # mutableUsers = false;
groups.fin.members = [ "${user}" "hledger" ]; groups = {
wiki.members = [ "${user}" "etebase-server" "paperless" ];
};
users = { users = {
root.openssh.authorizedKeys.keys = [ root.openssh.authorizedKeys.keys = [
@ -80,7 +82,7 @@ in
"${user}" = { "${user}" = {
isNormalUser = true; isNormalUser = true;
extraGroups = [ "wheel" "docker" "fin" ]; extraGroups = [ "wheel" "docker" ];
openssh.authorizedKeys.keys = [ openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPLfc2MW5f4Qn1ifAjPPSTRjDST9Bpwn4M8pWvtYrlnY nixos@wsl@hermes" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPLfc2MW5f4Qn1ifAjPPSTRjDST9Bpwn4M8pWvtYrlnY nixos@wsl@hermes"
]; ];

View file

@ -1,7 +1,7 @@
{ ... }: { ... }:
{ {
systemd.tmpfiles.rules = [ systemd.tmpfiles.rules = [
"f /run/agenix/etebase 0600 etebase-server etebase-server -" "f /run/agenix/etebase 0600 etebase-server wiki -"
]; ];
services = { services = {

View file

@ -44,8 +44,6 @@
}; };
}; };
users.users.hledger.extraGroups = [ "fin" ];
security.acme = { security.acme = {
acceptTerms = true; acceptTerms = true;
certs = { certs = {

View file

@ -9,7 +9,7 @@ in
{ {
users.payas = { users.payas = {
isNormalUser = true; isNormalUser = true;
extraGroups = [ "wheel" "networkmanager" "adbusers" "docker" "libvirtd" "fin" ]; extraGroups = [ "wheel" "networkmanager" "adbusers" "docker" "libvirtd" ];
home = "/home/${payas}"; home = "/home/${payas}";
description = payas; description = payas;
group = "payas"; group = "payas";

View file

@ -26,9 +26,6 @@
PAPERLESS_URL = "https://paperless.bhankas.org"; PAPERLESS_URL = "https://paperless.bhankas.org";
PAPERLESS_ALLOWED_HOSTS = "127.0.0.1,bhankas.org"; PAPERLESS_ALLOWED_HOSTS = "127.0.0.1,bhankas.org";
PAPERLESS_CSRF_TRUSTED_ORIGINS = "https://paperless.bhankas.org"; PAPERLESS_CSRF_TRUSTED_ORIGINS = "https://paperless.bhankas.org";
PAPERLESS_ADMIN_USER = "bruce";
PAPERLESS_ADMIN_PASSWORD = "wayne";
PAPERLESS_ADMIN_MAIL = "admin@bhankas.org";
PAPERLESS_USE_X_FORWARD_HOST = true; PAPERLESS_USE_X_FORWARD_HOST = true;
PAPERLESS_PROXY_SSL_HEADER = "[\"HTTP_XFORWARDED_PROTO\", \"https\"]"; PAPERLESS_PROXY_SSL_HEADER = "[\"HTTP_XFORWARDED_PROTO\", \"https\"]";
PAPERLESS_CONSUMER_RECURSIVE = true; PAPERLESS_CONSUMER_RECURSIVE = true;