From e917fa122d735a5dae015f08d550ddbb31b44c96 Mon Sep 17 00:00:00 2001
From: Luke Granger-Brown <hg@lukegb.com>
Date: Fri, 19 Aug 2022 19:26:44 +0100
Subject: [PATCH] bvm-netbox: oops, ninovpn

---
 ops/nixos/bvm-netbox/default.nix | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/ops/nixos/bvm-netbox/default.nix b/ops/nixos/bvm-netbox/default.nix
index a6215a196f..9d8b336b1b 100644
--- a/ops/nixos/bvm-netbox/default.nix
+++ b/ops/nixos/bvm-netbox/default.nix
@@ -220,5 +220,15 @@ in {
     };
   };
 
+  users.groups.ninovpn = {};
+  users.users.ninovpn = {
+    group = "ninovpn";
+    isNormalUser = true;
+    openssh.authorizedKeys.keys = [
+      "command=\"/bin/false\",restrict,port-forwarding ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIISTSUEIzxpqa9kZwfryFlYA5FJaHJiDJHnw13Vg4NHg root@nino-010-worker"
+      "command=\"/bin/false\",restrict,port-forwarding ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHGK5a+5jekPlsI+44PCy9CZWQFqFzNVEuCo4LVZxo3O root@nino-011-worker"
+    ];
+  };
+
   system.stateVersion = "21.05";
 }