diff options
author | Soispha <soispha@vhack.eu> | 2023-06-06 15:13:32 +0200 |
---|---|---|
committer | Soispha <soispha@vhack.eu> | 2023-06-06 15:13:32 +0200 |
commit | 3f7852df408ac5bb5148e6d8cf7d837d730c101d (patch) | |
tree | 21b0f1fe80d569f5e23f0907b73488671805c1b0 /system/services/serverphone/default.nix | |
parent | Refactor(secrets/nheko): Separate in directory (diff) | |
download | nixos-config-3f7852df408ac5bb5148e6d8cf7d837d730c101d.zip |
Fix(system/services/serverphone): Fully add
Diffstat (limited to 'system/services/serverphone/default.nix')
-rw-r--r-- | system/services/serverphone/default.nix | 36 |
1 files changed, 35 insertions, 1 deletions
diff --git a/system/services/serverphone/default.nix b/system/services/serverphone/default.nix index 6ad0fbdf..5b43f5ee 100644 --- a/system/services/serverphone/default.nix +++ b/system/services/serverphone/default.nix @@ -1,7 +1,41 @@ -{...}: { +{ + config, + serverphone, + system, + ... +}: { services.serverphone = { + package = "${serverphone.packages.${system}.default}"; enable = true; + domain = "localhost"; + acceptedSshKeys = [ + "AAAAC3NzaC1lZDI1NTE5AAAAIGBFuTNNn71Rhfnop2cdz3r/RhWWlCePnSBOhTBbu2ME" + ]; + authorized = { + acceptedGpgKeys = [ + { + source = ./keys/soispha_at_vhack.eu; + trust = "ultimate"; + } + ]; + }; + caCertificate = "certificates/ca.crt"; + certificate = "certificates/server.crt"; + privateKey = config.age.secrets.serverphoneServer.path; + certificateRequest = { + acceptedUsers = [ + "soispha $argon2id$v=19$m=19456,t=2,p=1$EvhPENIBqL5b1RO5waNMWA$pJ +8vDrCNJKDlqwB5bVDLjHVPEXm9McQhtt9OXSD8Zkc" + ]; + caPrivateKey = config.age.secrets.serverphoneCa.path; + }; }; + + users.users.serverphone = { + group = "serverphone"; + isSystemUser = true; + }; + users.groups.serverphone = {}; } # vim: ts=2 |