yuzuru/schabernack: Migrate to renge
This commit is contained in:
parent
8f7ee06d87
commit
049a6357bd
|
@ -20,6 +20,7 @@
|
|||
./services/onlypain.icu
|
||||
./services/prometheus.nix
|
||||
./services/sbruder.xyz
|
||||
./services/schabernack.nix
|
||||
];
|
||||
|
||||
sbruder = {
|
||||
|
|
|
@ -21,7 +21,7 @@ in
|
|||
forceSSL = true;
|
||||
enableACME = true;
|
||||
|
||||
root = "/var/www/schabernack/production";
|
||||
root = "/var/www/schabernack";
|
||||
|
||||
# only log page views, rss feed access, media file download and embed views
|
||||
extraConfig = ''
|
||||
|
@ -41,21 +41,4 @@ in
|
|||
};
|
||||
};
|
||||
};
|
||||
|
||||
systemd.tmpfiles.rules = [
|
||||
"d /var/www/schabernack/production 0755 schabernack root -"
|
||||
];
|
||||
|
||||
users = {
|
||||
users.schabernack = {
|
||||
isSystemUser = true;
|
||||
group = "schabernack";
|
||||
shell = "/bin/sh";
|
||||
|
||||
openssh.authorizedKeys.keys = map
|
||||
(key: "command=\"${pkgs.rrsync}/bin/rrsync -wo /var/www/schabernack/\",no-agent-forwarding,no-port-forwarding,no-pty,no-user-rc,no-X11-forwarding ${key}")
|
||||
config.sbruder.pubkeys.trustedKeys;
|
||||
};
|
||||
groups.schabernack = { };
|
||||
};
|
||||
}
|
|
@ -4,8 +4,6 @@
|
|||
imports = [
|
||||
./hardware-configuration.nix
|
||||
../../modules
|
||||
|
||||
./services/schabernack.nix
|
||||
];
|
||||
|
||||
sbruder = {
|
||||
|
|
Loading…
Reference in a new issue