this repo has no description
moar stuff
+24
-8
+1
-1
.gitmodules
+1
-1
.gitmodules
+23
-7
hosts/vulpes/infra/git.nix
+23
-7
hosts/vulpes/infra/git.nix
···
53
53
};
54
54
};
55
55
56
-
systemd.tmpfiles.rules = [ "d /var/lib/tangled/priv-repos 0755 git-puppy git-puppy -" ];
56
+
systemd.tmpfiles.rules = [
57
+
"d /var/lib/git-priv 0755 git-puppy-priv git-puppy-priv -"
58
+
"d /var/lib/git-priv/roufpup 0755 git-puppy-priv git-puppy-priv -"
59
+
];
57
60
58
61
system.activationScripts = {
59
62
privateGitRepos = {
60
63
deps = [ "users" ];
61
64
text =
62
65
let
63
-
repo_folder = "/var/lib/tangled/priv-repos/$repo";
66
+
repo_folder = "/var/lib/git-priv/roufpup/$repo";
64
67
in
65
68
''
66
69
for repo in priv-dots; do
67
70
if [ ! -d "${repo_folder}" ]; then
68
71
${pkgs.git}/bin/git init --bare ${repo_folder}
69
-
chown -R git-puppy:git-puppy ${repo_folder}
72
+
chown -R git-puppy-priv:git-puppy-priv ${repo_folder}
70
73
fi
71
74
done
72
75
'';
73
76
};
74
77
};
75
78
76
-
users.users.git-puppy.openssh.authorizedKeys.keys = [
77
-
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIkUMYuTCjDCIldnrQlA8M5gPkEUZ/oXxD5+B7nNeoM3 openpgp:0x13D59319"
78
-
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKSHU9Y8jXAJtm2+K30zOr9LabGjvU/d42I8ZzMr6pcQ"
79
-
];
79
+
users = {
80
+
users.git-puppy-priv = {
81
+
isNormalUser = true;
82
+
group = "git-puppy-priv";
83
+
home = "/var/lib/git-priv";
84
+
85
+
openssh.authorizedKeys.keys = [
86
+
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIkUMYuTCjDCIldnrQlA8M5gPkEUZ/oXxD5+B7nNeoM3 openpgp:0x13D59319"
87
+
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKSHU9Y8jXAJtm2+K30zOr9LabGjvU/d42I8ZzMr6pcQ"
88
+
];
89
+
};
90
+
groups = {
91
+
git-puppy-priv = {
92
+
members = [ "git-puppy-priv" ];
93
+
};
94
+
};
95
+
};
80
96
}