refactor: update hosts and feature lists for new architecture
This commit is contained in:
@@ -1,15 +1,13 @@
|
||||
{ lib, ... }:
|
||||
{ lib, userKeys, ... }:
|
||||
{
|
||||
features.nix-settings.towerCache.enable = false;
|
||||
image.modules.iso-installer = {
|
||||
isoImage.squashfsCompression = "zstd -Xcompression-level 6";
|
||||
};
|
||||
|
||||
# live iso: passwordless login and sudo
|
||||
users.users.matej.initialHashedPassword = "";
|
||||
users.users.root.openssh.authorizedKeys.keys = [
|
||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICQGLdINKzs+sEy62Pefng0bcedgU396+OryFgeH99/c janezicmatej"
|
||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDk00+Km03epQXQs+xEwwH3zcurACzkEH+kDOPBw6RQe openpgp:0xB095D449"
|
||||
];
|
||||
users.users.root.openssh.authorizedKeys.keys = userKeys.sshAuthorizedKeys;
|
||||
services.openssh.settings.PermitRootLogin = lib.mkForce "prohibit-password";
|
||||
security.sudo.wheelNeedsPassword = false;
|
||||
|
||||
|
||||
Reference in New Issue
Block a user