federez/nix
7
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

admins: enroll Tom Hubrecht

Browse source 
Tom Hubrecht est un sysadmin / membre d'honneur de la DGNum, membre du CA d'AliENS.

Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
This commit is contained in:
Ryan Lahfa 2024-02-14 21:10:57 +01:00
parent a4ab0fce56
commit 0355dd4b80
3 changed files with 9 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

1
profiles/sysadmin.nix
View file

@ -2,6 +2,7 @@
users.users.root.openssh.authorizedKeys.keyFiles = [
../pubkeys/raito.keys
../pubkeys/bensmrs.keys
../pubkeys/tomate.keys
];
users.motd = (builtins.readFile ./federez.motd);

1
pubkeys/tomate.keys Normal file
View file

@ -0,0 +1 @@
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL+EZXYziiaynJX99EW8KesnmRTZMof3BoIs3mdEl8L3

11
secrets/secrets.nix
View file

@ -7,11 +7,14 @@ let
# Add yourself.
raito = readKeyFile ../pubkeys/raito.keys;
bensmrs = readKeyFile ../pubkeys/bensmrs.keys;
tomate = readKeyFile ../pubkeys/tomate.keys;
matrix-admins = raito ++ bensmrs;
vaultwarden-admins = raito ++ bensmrs;
keycloak-admins = raito ++ bensmrs;
ldap-bind-admins = raito ++ bensmrs;
active-admins = raito ++ bensmrs ++ tomate;
matrix-admins = active-admins;
vaultwarden-admins = active-admins;
keycloak-admins = active-admins;
ldap-bind-admins = active-admins;
servers = [ estragon wagon lagon klingon ];
in
{