commit 77dbe2f46e8946be6d0e6706fb9acf807e135b8f · pyrox.dev/nixpkgs

+17 -2
nixos/modules/services/misc/nix-ssh-serve.nix
···

       4
       4
        
       

     

       5
       5
        
       {

     

       6
       6
        
         options = {

     

       7
       7
       +
       

     

       7
       8
        
           nix.sshServe = {

     

       9
       9
       +
       

     

       8
       10
        
             enable = mkOption {

     

       11
       11
       +
               type = types.bool;

     

       12
       12
       +
               default = false;

     

       9
       13
        
               description = "Whether to enable serving the Nix store as a binary cache via SSH.";

     

       10
       10
       -
               default = false;

     

       11
       11
       -
               type = types.bool;

     

       14
       14
       +
             };

     

       15
       15
       +
       

     

       16
       16
       +
             keys = mkOption {

     

       17
       17
       +
               type = types.listOf types.str;

     

       18
       18
       +
               default = [];

     

       19
       19
       +
               example = [ "ssh-dss AAAAB3NzaC1k... alice@example.org" ];

     

       20
       20
       +
               description = "A list of SSH public keys allowed to access the binary cache via SSH.";

     

       12
       21
        
             };

     

       22
       22
       +
       

     

       13
       23
        
           };

     

       24
       24
       +
       

     

       14
       25
        
         };

     

       15
       26
        
       

     

       16
       27
        
         config = mkIf config.nix.sshServe.enable {

     

       28
       28
       +
       

     

       17
       29
        
           users.extraUsers.nix-ssh = {

     

       18
       30
        
             description = "Nix SSH substituter user";

     

       19
       31
        
             uid = config.ids.uids.nix-ssh;

     
···

       32
       44
        
               ForceCommand ${config.nix.package}/bin/nix-store --serve

     

       33
       45
        
             Match All

     

       34
       46
        
           '';

     

       47
       47
       +
       

     

       48
       48
       +
           users.extraUsers.nix-ssh.openssh.authorizedKeys.keys = config.nix.sshServe.keys;

     

       49
       49
       +
       

     

       35
       50
        
         };

     

       36
       51
        
       }