lukegb/depot
1
0
Fork 0
Code Issues 1 Pull requests Projects Packages Activity Actions

nixos/common: add pam-ussh

Browse source
This commit is contained in:
Luke Granger-Brown 2022-06-04 12:21:32 +01:00
parent 2c6be52ce9
commit bd2be7196a
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
ops/nixos/lib/common.nix
View file

@ -151,6 +151,11 @@ in
environment.homeBinInPath = true; environment.homeBinInPath = true;
security.pam.enableSSHAgentAuth = true; security.pam.enableSSHAgentAuth = true;
security.pam.ussh = {
enable = true;
control = "sufficient";
caFile = ../../secrets/client-ca.pub;
};
users.mutableUsers = false; users.mutableUsers = false;
users.users = let secrets = depot.ops.secrets; in { users.users = let secrets = depot.ops.secrets; in {