summaryrefslogtreecommitdiff
path: root/system-profiles
diff options
context:
space:
mode:
authorGregor Kleen <gkleen@yggdrasil.li>2022-02-12 20:09:09 +0100
committerGregor Kleen <gkleen@yggdrasil.li>2022-02-12 20:09:09 +0100
commitf5fc458891cecffe22e4d77d75f1ad26a6417298 (patch)
tree575baa92a785fad0b19cd0ddfe05f5cdc7e43b30 /system-profiles
parent714dd0655d2d9a94e4c1703b6f68e831dd10faa2 (diff)
downloadnixos-f5fc458891cecffe22e4d77d75f1ad26a6417298.tar
nixos-f5fc458891cecffe22e4d77d75f1ad26a6417298.tar.gz
nixos-f5fc458891cecffe22e4d77d75f1ad26a6417298.tar.bz2
nixos-f5fc458891cecffe22e4d77d75f1ad26a6417298.tar.xz
nixos-f5fc458891cecffe22e4d77d75f1ad26a6417298.zip
bump
Diffstat (limited to 'system-profiles')
-rw-r--r--system-profiles/build-server/default.nix2
-rw-r--r--system-profiles/core.nix8
2 files changed, 6 insertions, 4 deletions
diff --git a/system-profiles/build-server/default.nix b/system-profiles/build-server/default.nix
index 9cb9e142..20b23a31 100644
--- a/system-profiles/build-server/default.nix
+++ b/system-profiles/build-server/default.nix
@@ -12,7 +12,7 @@
12 group = "nix-ssh-builder"; 12 group = "nix-ssh-builder";
13 extraGroups = [ "ssh" ]; 13 extraGroups = [ "ssh" ];
14 }; 14 };
15 nix.trustedUsers = [ "nix-ssh-builder" ]; 15 nix.settings.trusted-users = [ "nix-ssh-builder" ];
16 16
17 services.openssh = { 17 services.openssh = {
18 enable = true; 18 enable = true;
diff --git a/system-profiles/core.nix b/system-profiles/core.nix
index c243f857..0b20d944 100644
--- a/system-profiles/core.nix
+++ b/system-profiles/core.nix
@@ -43,9 +43,11 @@ in {
43 43
44 nix = { 44 nix = {
45 package = pkgs.nixUnstable; 45 package = pkgs.nixUnstable;
46 useSandbox = true; 46 settings = {
47 allowedUsers = [ "*" ]; 47 sandbox = true;
48 trustedUsers = [ "root" "@wheel" ]; 48 allowed-users = [ "*" ];
49 trusted-users = [ "root" "@wheel" ];
50 };
49 extraOptions = '' 51 extraOptions = ''
50 experimental-features = nix-command flakes 52 experimental-features = nix-command flakes
51 ''; 53 '';