Allow root ssh access for the infra team

NixOS · Jul 7, 2024 · 8807856 · 8807856
1 parent 9955da1
commit 8807856
Show file tree

Hide file tree

Showing 2 changed files with 23 additions and 1 deletion.
diff --git a/flake.lock b/flake.lock
diff --git a/flake.nix b/flake.nix
@@ -1,12 +1,17 @@
 {
   inputs.nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable-small";
+  inputs.nixos-infra = {
+    url = "github:nixos/infra";
+    flake = false;
+  };
   inputs.ofborg.url = "github:nixos/ofborg";
-  outputs = { nixpkgs, self, ofborg }: {
+  outputs = { nixpkgs, self, ofborg, nixos-infra }: {
     nixosConfigurations.aarch64-build-box = nixpkgs.lib.nixosSystem {
       system = "aarch64-linux";
       modules = [
         ./configuration.nix
         { ofborg.package = ofborg.packages.aarch64-linux.ofborg.rs; }
+        { users.users.root.openssh.authorizedKeys.keys = (import "${nixos-infra}/ssh-keys.nix").infra; }
       ];
     };
     hydraJobs.system = self.nixosConfigurations.aarch64-build-box.config.system.build.toplevel;