roles/users: remove root ssh

This commit is contained in:
zowoq 2023-02-07 11:14:38 +10:00
parent c35f3a85d9
commit 83ea59ab99

View file

@ -1,4 +1,4 @@
{ config, lib, ... }:
{ lib, ... }:
let
userImports =
@ -18,18 +18,4 @@ in
# No mutable users
users.mutableUsers = false;
# Assign keys from all users in wheel group
# This is only done because nixops cant be deployed from any other account
users.extraUsers.root.openssh.authorizedKeys.keys = lib.unique (
lib.flatten (
builtins.map (u: u.openssh.authorizedKeys.keys)
(
lib.attrValues (
lib.filterAttrs (_: u: lib.elem "wheel" u.extraGroups)
config.users.extraUsers
)
)
)
);
}