Skip to content
Snippets Groups Projects
Commit c6f0a564 authored by Jean-Paul Calderone's avatar Jean-Paul Calderone
Browse files

make users non-secret

The default case was actually catastrophically bad for any actual deployment
since it would just lock everyone out of all the systems.
parent b0c7995c
No related branches found
No related tags found
3 merge requests!97Merge staging into production,!96Merge develop into staging,!93Add symlink to secrets
...@@ -6,12 +6,7 @@ import ../../lib/make-grid.nix { ...@@ -6,12 +6,7 @@ import ../../lib/make-grid.nix {
config = ./config.json; config = ./config.json;
nodes = cfg: nodes = cfg:
let let
importDef = default: path: ( sshUsers = import ./users.nix;
if builtins.pathExists path
then import path
else default
);
sshUsers = importDef {} ./secrets/staging-users.nix;
in { in {
"payments" = import ../../lib/make-issuer.nix ({ "payments" = import ../../lib/make-issuer.nix ({
publicIPv4 = "18.197.42.120"; publicIPv4 = "18.197.42.120";
......
let key = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGN4VQm3BIQKEFTw6aPrEwNuShf640N+Py2LOKznFCRT exarkun@bottom";
in { "root" = key; jcalderone = key; }
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment