moby: document secrets
This commit is contained in:
@@ -2,8 +2,6 @@
|
|||||||
- generate with `nix-store --generate-binary-cache-key desko cache-priv-key.pem cache-pub-key.pem`
|
- generate with `nix-store --generate-binary-cache-key desko cache-priv-key.pem cache-pub-key.pem`
|
||||||
- used when deploying packages to a remote machine
|
- used when deploying packages to a remote machine
|
||||||
- colin-passwd.bin:
|
- colin-passwd.bin:
|
||||||
- see <https://search.nixos.org/options?channel=unstable&show=users.users.%3Cname%3E.hashedPasswordFile&from=0&size=50&sort=relevance&type=packages&query=users.users>
|
- generate with `mkpasswd -m sha512crypt`, or `mkpasswd --rounds=2000000 --method=sha512crypt`
|
||||||
- update by running `sudo passwd colin` and then taking the 2nd item from the colin: line in /etc/shadow
|
|
||||||
- N.B.: you MUST do `sudo passwd colin` instead of just `passwd`, i guess because of immutable users or something
|
|
||||||
- guest/authorized_keys.bin
|
- guest/authorized_keys.bin
|
||||||
- who's allowed to login to the guest account
|
- who's allowed to login to the guest account
|
||||||
|
2
secrets/moby/README.md
Normal file
2
secrets/moby/README.md
Normal file
@@ -0,0 +1,2 @@
|
|||||||
|
- colin-passwd.bin:
|
||||||
|
- generate with `mkpasswd -m sha512crypt`, or `mkpasswd --rounds=200000 --method=sha512crypt`
|
Reference in New Issue
Block a user