makefu: add new git user makefu-omo
This commit is contained in:
parent
9381e5d28e
commit
671710c573
1
Zpubkeys/makefu_omo.ssh.pub
Normal file
1
Zpubkeys/makefu_omo.ssh.pub
Normal file
@ -0,0 +1 @@
|
||||
ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtDhAxjiCH0SmTGNDqmlKPug9qTf+IFOVjdXfk01lAV2KMVW00CgNo2d5kl5+6pM99K7zZO7Uo7pmSFLSCAg8J6cMRI3v5OxFsnQfcJ9TeGLZt/ua7F8YsyIIr5wtqKtFbujqve31q9xJMypEpiX4np3nLiHfYwcWu7AFAUY8UHcCNl4JXm6hsmPe+9f6Mg2jICOdkfMMn0LtW+iq1KZpw1Nka2YUSiE2YuUtV+V+YaVMzdcjknkVkZNqcVk6tbJ1ZyZKM+bFEnE4VkHJYDABZfELpcgBAszfWrVG0QpEFjVCUq5atpIVHJcWWDx072r0zgdTPcBuzsHHC5PRfVBLEw== makefu@servarch
|
@ -1,4 +0,0 @@
|
||||
deploy_host := root@pnp
|
||||
nixpkgs_url := https://github.com/nixos/nixpkgs
|
||||
nixpkgs_rev := 4c01e6d91993b6de128795f4fbdd25f6227fb870
|
||||
secrets_dir := /home/makefu/secrets/pnp
|
@ -30,6 +30,7 @@ let
|
||||
post-receive = git.irc-announce {
|
||||
nick = config.networking.hostName;
|
||||
channel = "#retiolum";
|
||||
# TODO remove the hardcoded hostname
|
||||
server = "cd.retiolum";
|
||||
};
|
||||
};
|
||||
@ -52,14 +53,23 @@ let
|
||||
# TODO: get the list of all krebsministers
|
||||
krebsminister = with config.krebs.users; [ lass tv uriel ];
|
||||
|
||||
priv-rules = with config.krebs.users; repo:
|
||||
set-owners repo [ makefu ];
|
||||
#all-makefu = with config.krebs.users; [ makefu ];
|
||||
|
||||
krebs-rules = with config.krebs.users; repo:
|
||||
set-owners repo [ makefu ] ++ set-ro-access repo krebsminister ;
|
||||
|
||||
all-makefu = with config.krebs.users; [ makefu makefu-omo ];
|
||||
|
||||
priv-rules = repo: set-owners repo all-makefu;
|
||||
|
||||
krebs-rules = repo:
|
||||
set-owners repo all-makefu ++ set-ro-access repo krebsminister;
|
||||
|
||||
in {
|
||||
imports = [ ../../3modules/krebs/git.nix ];
|
||||
imports = [{
|
||||
krebs.users.makefu-omo = {
|
||||
name = "makefu-omo" ;
|
||||
pubkey= with builtins; readFile ../../Zpubkeys/makefu_omo.ssh.pub;
|
||||
};
|
||||
}];
|
||||
krebs.git = {
|
||||
enable = true;
|
||||
root-title = "public repositories";
|
||||
|
Loading…
Reference in New Issue
Block a user