diff options
| author | Ben Sima <ben@bsima.me> | 2024-05-20 23:15:31 -0400 |
|---|---|---|
| committer | Ben Sima <ben@bsima.me> | 2024-05-20 23:15:31 -0400 |
| commit | 8bb463db7e232bc507d82d602a92cb752c873d79 (patch) | |
| tree | 2857ee7b2db73d6c814c5ad4a085c95ae7bc7b61 /Biz/OsBase.nix | |
| parent | 81108da4b9efb5e2699b9b4167e13d695be8e4d3 (diff) | |
Fix push.sh, act as $USER instead of root
At some point I guess the activation script changed to no longer include the
domain, so I have to get it form the 'domainname' systemd service.
Also I switched to sshing as $USER instead of root, which just seems like better
security practice. I originally used root because I thought you had to be root
to do nix system stuff, but it turns out that's not the case.
Diffstat (limited to 'Biz/OsBase.nix')
| -rw-r--r-- | Biz/OsBase.nix | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/Biz/OsBase.nix b/Biz/OsBase.nix index a9407ab..d9c6be9 100644 --- a/Biz/OsBase.nix +++ b/Biz/OsBase.nix @@ -20,6 +20,7 @@ in { nix.optimise.automatic = true; nix.optimise.dates = [ "Sunday 02:30" ]; nix.settings.extra-sandbox-paths = [ config.programs.ccache.cacheDir ]; + nix.settings.trusted-users = [ "ben" ]; programs.ccache.enable = true; programs.mosh.enable = true; programs.mosh.withUtempter = true; |