summaryrefslogtreecommitdiff
path: root/modules/nixos
diff options
context:
space:
mode:
authorseth <[email protected]>2023-08-19 19:46:18 -0400
committerseth <[email protected]>2023-08-19 19:46:18 -0400
commite1896c62b007e80e159884fc0b05b435cd93c106 (patch)
tree69c143c1787a135d03b4aac4b9814eb76ce96f37 /modules/nixos
parentefe7ea8b5f30393dd351ac058b85b2f77d17dc59 (diff)
modules/base+server: force trusted users & add default allowed-users
Diffstat (limited to 'modules/nixos')
-rw-r--r--modules/nixos/base/security.nix2
-rw-r--r--modules/nixos/server/default.nix2
2 files changed, 2 insertions, 2 deletions
diff --git a/modules/nixos/base/security.nix b/modules/nixos/base/security.nix
index a8536a5..e13d1c7 100644
--- a/modules/nixos/base/security.nix
+++ b/modules/nixos/base/security.nix
@@ -22,6 +22,6 @@ in {
};
nix.settings = {
- trusted-users = mkDefault ["root" "@wheel"];
+ trusted-users = ["root" "@wheel"];
};
}
diff --git a/modules/nixos/server/default.nix b/modules/nixos/server/default.nix
index 0e2cd98..dd8e40b 100644
--- a/modules/nixos/server/default.nix
+++ b/modules/nixos/server/default.nix
@@ -30,7 +30,7 @@ in {
};
settings = {
- allowed-users = [];
+ allowed-users = [config.networking.hostName];
trusted-substituters = [
"https://getchoo.cachix.org"
"https://nix-community.cachix.org"