erwin/nixos-config
1
0
Fork 0
Code Issues 1 Pull requests Projects 1 Releases Wiki Activity Actions

Fix sudo config

Browse source
This commit is contained in:
Erwin Boskma 2023-01-31 17:00:01 +01:00
parent 5faf6cb79d
commit 1292bde8eb
Signed by: erwin
SSH key fingerprint: SHA256:CyeNoWXd3kjX2Nwu6pDxxdS7OqmPVOy0NavA/KU/ntU
4 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
machines/drone/configuration.nix
View file

@ -39,6 +39,8 @@
nameservers = [ "10.0.0.254" ]; nameservers = [ "10.0.0.254" ];
}; };
security.sudo.execWheelOnly = true;
services.openssh.enable = true; services.openssh.enable = true;
sops.defaultSopsFile = ./secrets.yaml; sops.defaultSopsFile = ./secrets.yaml;

1
machines/gitea/configuration.nix
View file

@ -41,7 +41,6 @@
}; };
security.sudo.execWheelOnly = true; security.sudo.execWheelOnly = true;
security.pam.enableSSHAgentAuth = true;
# services.openssh.enable = true; # services.openssh.enable = true;

1
machines/minio/configuration.nix
View file

@ -45,7 +45,6 @@
}; };
security.sudo.execWheelOnly = true; security.sudo.execWheelOnly = true;
security.pam.enableSSHAgentAuth = true;
# services.openssh.enable = true; # services.openssh.enable = true;

2
machines/proxy/configuration.nix
View file

@ -41,6 +41,8 @@
services.openssh.enable = true; services.openssh.enable = true;
security.sudo.execWheelOnly = true;
sops.defaultSopsFile = ./secrets.yaml; sops.defaultSopsFile = ./secrets.yaml;
sops.secrets = { }; sops.secrets = { };