Fachschaft/nixConfig
7
2
Fork 2
Code Issues 12 Pull requests 3 Projects Wiki Activity

Compare commits

base: Fachschaft:d74be71aa19a397115866846db859e161c467e23
Branches Tags
Fachschaft:main
Fachschaft:magnus-keys
..
compare: Fachschaft:5a64d396214f72ef982d14167d827ac59557eac6
Branches Tags
Fachschaft:main
Fachschaft:magnus-keys

1 commit
d74be71aa1 ... 5a64d39621

Author SHA1 Message Date
Dennis Frieberg
5a64d39621
added keys so nodens can sign builds 2025-06-22 20:12:01 +02:00
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
nixos/roles/default.nix
View file

@ -34,10 +34,10 @@
# right now it is only nodens so nodens can build system configs # right now it is only nodens so nodens can build system configs
# and we can deploy them from nodens. # and we can deploy them from nodens.
# For security reasons we might want to move this to the vm part, as # For security reasons we might want to move this to the vm part, as
# someone who can get control of nodens and get hold of the build process # someone who can get controll of nodens and get hold of the build process
# can gain control of the other machines. While this is very handy # can gain control of the other machines. While this is very handy
# and a step towards CI, we might not want this for backups. # and a step towards CI, we might not want this for backups.
# (This is a tradeof between security and convenience) # (This is a tradeof between security and convinience)
nix.settings.trusted-public-keys = ["nodens-deploy.key:VHJmEr17pdoEEnWlSfC03TIf4GBbClxGRiInHuWaUvU="]; nix.settings.trusted-public-keys = ["nodens-deploy.key:VHJmEr17pdoEEnWlSfC03TIf4GBbClxGRiInHuWaUvU="];
environment = { environment = {