diff options
author | Gregor Kleen <gkleen@yggdrasil.li> | 2022-02-12 20:09:09 +0100 |
---|---|---|
committer | Gregor Kleen <gkleen@yggdrasil.li> | 2022-02-12 20:09:09 +0100 |
commit | f5fc458891cecffe22e4d77d75f1ad26a6417298 (patch) | |
tree | 575baa92a785fad0b19cd0ddfe05f5cdc7e43b30 /system-profiles | |
parent | 714dd0655d2d9a94e4c1703b6f68e831dd10faa2 (diff) | |
download | nixos-f5fc458891cecffe22e4d77d75f1ad26a6417298.tar nixos-f5fc458891cecffe22e4d77d75f1ad26a6417298.tar.gz nixos-f5fc458891cecffe22e4d77d75f1ad26a6417298.tar.bz2 nixos-f5fc458891cecffe22e4d77d75f1ad26a6417298.tar.xz nixos-f5fc458891cecffe22e4d77d75f1ad26a6417298.zip |
bump
Diffstat (limited to 'system-profiles')
-rw-r--r-- | system-profiles/build-server/default.nix | 2 | ||||
-rw-r--r-- | system-profiles/core.nix | 8 |
2 files changed, 6 insertions, 4 deletions
diff --git a/system-profiles/build-server/default.nix b/system-profiles/build-server/default.nix index 9cb9e142..20b23a31 100644 --- a/system-profiles/build-server/default.nix +++ b/system-profiles/build-server/default.nix | |||
@@ -12,7 +12,7 @@ | |||
12 | group = "nix-ssh-builder"; | 12 | group = "nix-ssh-builder"; |
13 | extraGroups = [ "ssh" ]; | 13 | extraGroups = [ "ssh" ]; |
14 | }; | 14 | }; |
15 | nix.trustedUsers = [ "nix-ssh-builder" ]; | 15 | nix.settings.trusted-users = [ "nix-ssh-builder" ]; |
16 | 16 | ||
17 | services.openssh = { | 17 | services.openssh = { |
18 | enable = true; | 18 | enable = true; |
diff --git a/system-profiles/core.nix b/system-profiles/core.nix index c243f857..0b20d944 100644 --- a/system-profiles/core.nix +++ b/system-profiles/core.nix | |||
@@ -43,9 +43,11 @@ in { | |||
43 | 43 | ||
44 | nix = { | 44 | nix = { |
45 | package = pkgs.nixUnstable; | 45 | package = pkgs.nixUnstable; |
46 | useSandbox = true; | 46 | settings = { |
47 | allowedUsers = [ "*" ]; | 47 | sandbox = true; |
48 | trustedUsers = [ "root" "@wheel" ]; | 48 | allowed-users = [ "*" ]; |
49 | trusted-users = [ "root" "@wheel" ]; | ||
50 | }; | ||
49 | extraOptions = '' | 51 | extraOptions = '' |
50 | experimental-features = nix-command flakes | 52 | experimental-features = nix-command flakes |
51 | ''; | 53 | ''; |