deployment: trivial setup

TODO: * systemd-service * reverse-proxy
2022-03-10 02:23:37 +01:00 · 2022-03-10 02:23:37 +01:00 · fcc22aaf7d
parent 4402cebab6
commit fcc22aaf7d
1 changed files with 12 additions and 0 deletions
--- a/deployment/hosts/beherbergung-lifeline/configuration.nix
+++ b/deployment/hosts/beherbergung-lifeline/configuration.nix
@ -12,4 +12,16 @@
      ipv6.addresses = [ { address = "2a01:4f8:c0c:cf13::1"; prefixLength = 64; } ];
    };
  };
+
+  users.users."beherbergung" = {
+    group = "beherbergung";
+    isSystemUser = true;
+    createHome = true;
+    home = "/var/lib/beherbergung";
+    openssh.authorizedKeys.keys = config.users.users.root.openssh.authorizedKeys.keys;
+    shell = "${pkgs.bash}/bin/bash";
+  };
+  users.groups."beherbergung" = {};
+
+  networking.firewall.allowedTCPPorts = [ 4000 3000 ];
 }