sercanto/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

modules/nixos/common: add initrd emergencyAccess

Browse source
This commit is contained in:
zowoq 2024-07-25 20:37:35 +10:00
parent 927004e604
commit d486e79e48
4 changed files with 3 additions and 6 deletions

1
flake.nix
View file

@ -182,7 +182,6 @@
github-org-backup = ./modules/nixos/github-org-backup.nix; github-org-backup = ./modules/nixos/github-org-backup.nix;
hercules-ci = ./modules/nixos/hercules-ci.nix; hercules-ci = ./modules/nixos/hercules-ci.nix;
hydra = ./modules/nixos/hydra.nix; hydra = ./modules/nixos/hydra.nix;
emergency-access = ./modules/nixos/emergency-access.nix;
monitoring = ./modules/nixos/monitoring; monitoring = ./modules/nixos/monitoring;
nur-update = ./modules/nixos/nur-update.nix; nur-update = ./modules/nixos/nur-update.nix;
remote-builder = ./modules/nixos/remote-builder.nix; remote-builder = ./modules/nixos/remote-builder.nix;

1
hosts/build02/configuration.nix
View file

@ -9,7 +9,6 @@
inputs.self.nixosModules.common inputs.self.nixosModules.common
inputs.self.nixosModules.builder inputs.self.nixosModules.builder
inputs.self.nixosModules.disko-zfs inputs.self.nixosModules.disko-zfs
inputs.self.nixosModules.emergency-access
]; ];
# set in srvos, remove when reinstalling # set in srvos, remove when reinstalling

3
modules/nixos/common/security.nix
View file

@ -2,6 +2,9 @@
# Make sure that the firewall is enabled, even if it's the default. # Make sure that the firewall is enabled, even if it's the default.
networking.firewall.enable = true; networking.firewall.enable = true;
# allow to access emergency shell with a password
boot.initrd.systemd.emergencyAccess = "$6$he2fblfl/H7I.kvz$WbSCMXu8ztmqfj5jG4czqvu/rkMHxufxqHgy1urzXFSN.jZB4QiW5lOjR08vk8pZTyim3TT1wFkMaNE9zZ3sc1";
services.openssh = { services.openssh = {
hostKeys = [ hostKeys = [
{ {

4
modules/nixos/emergency-access.nix
View file

@ -1,4 +0,0 @@
{
# allow to access emergency shell with a password
boot.initrd.systemd.emergencyAccess = "$6$he2fblfl/H7I.kvz$WbSCMXu8ztmqfj5jG4czqvu/rkMHxufxqHgy1urzXFSN.jZB4QiW5lOjR08vk8pZTyim3TT1wFkMaNE9zZ3sc1";
}