colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

nixremote: fix up perms

Browse Source
This commit is contained in:
Colin 2023-11-23 01:44:27 +00:00
parent 3ff9c0ad0c
commit f26b64c660
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
hosts/common/users/nixremote.nix
View File

@ -8,6 +8,10 @@
users.users.nixremote = {
isNormalUser = true;
home = "/home/nixremote";
# remove write permissions everywhere in the home dir.
# combined with an ownership of root:nixremote, that means not even nixremote can write anything below this directory
# (in which case, i'm not actually sure why nixremote needs a home)
homeMode = "550";
group = "nixremote";
subUidRanges = [
{ startUid=300000; count=1; }
@ -24,7 +28,7 @@
fs."/".dir.acl = {
# don't allow the user to write anywhere
user = "root";
group = "root";
group = "nixremote";
};
};
}