shimun/ssh-cert-dist
1
0
Fork 0
Code Issues 1 Pull Requests 1 Packages Projects Releases Wiki Activity

added: hm module

Browse Source
This commit is contained in:
shimun
2022-12-04 23:29:32 +01:00
parent cdf2f0a5f8
commit e1ce751171
3 changed files with 70 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
modules/nixos.nix
View File

@@ -1,6 +1,6 @@
{ config, pkgs, lib, ... }: with lib; let
cfg = config.services.ssh-cert-dist;
ca = if isStorePath cfg.ca then cfg.ca else pkgs.writeText "ssh-ca" cfg.ca;
ca = if isPath cfg.ca then cfg.ca else pkgs.writeText "ssh-ca" cfg.ca;
in
{
options.services.ssh-cert-dist = {
@@ -44,14 +44,21 @@ in
};
systemd.services.ssh-cert-dist = {
wantedBy = [ "multi-user.target" ];
environment.RUST_LOG = "debug";
environment = {
SSH_CD_SOCKET_ADDRESS = "${cfg.host}:${toString cfg.port}";
SSH_CD_CERT_DIR = cfg.dataDir;
SSH_CD_VALIDATE_EXPIRY = true;
SSH_CD_VALIDATE_SERIAL = false;
SSH_CD_CA = ca;
RUST_LOG = "debug";
};
serviceConfig = {
ExecStartPre = "+${pkgs.writeShellScript "pre-start" ''
mkdir -p ${cfg.dataDir}
chown ${cfg.user}:${cfg.group} ${cfg.dataDir}
''}";
User = cfg.user;
ExecStart = "${cfg.package}/bin/ssh-cert-dist server --address ${cfg.host}:${toString cfg.port} -c ${cfg.dataDir} --ca ${ca}";
ExecStart = "${cfg.package}/bin/ssh-cert-dist server";
};
};
};