From e037e164c5c45ff33525d0c8575e8d9e0315ac7b Mon Sep 17 00:00:00 2001 From: Alexander Kassouni Date: Sun, 27 Sep 2026 22:07:56 -0700 Subject: move nix modules --- options.nix | 33 --------------------------------- 1 file changed, 33 deletions(-) delete mode 100644 options.nix (limited to 'options.nix') diff --git a/options.nix b/options.nix deleted file mode 100644 index faaf2c8..0000000 --- a/options.nix +++ /dev/null @@ -1,33 +0,0 @@ -{config, lib, ...}: let - magician = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII42yGEm1u3FxKdgox6Kkp9IBgBERVKrcIjQkrVbEO3m alex@kassouni.net"; - hierophant = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJqok+IgFuByRuoKM8HbiM919QmAVFvB2rI7ewgGsCiJ kassouni@hierophant"; -in { - options.my = { - adminKeys = lib.mkOption { - type = with lib.types; listOf singleLineStr; - description = '' - Keys granted an interactive shell in the wheel group, i.e. root by way - of sudo. Only add a key you would trust with the whole machine. - ''; - }; - - gitKeys = lib.mkOption { - type = with lib.types; listOf singleLineStr; - description = '' - Keys granted git-shell access to the repositories under /srv/git. - No interactive shell and no sudo, so this is the list to grow when - someone needs to push. - ''; - }; - }; - - config.my = { - adminKeys = [ - hierophant - magician - ]; - - # Admins push too; collaborator keys belong here and nowhere else. - gitKeys = config.my.adminKeys; - }; -} -- cgit v1.3.1