emileclarkb/dotfiles
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix sudo not accessible via pam ssh module (hyrule)

Browse source
This commit is contained in:
Emile Clark-Boman 2025-07-29 16:14:00 +10:00
parent f32b784ed7
commit 8661d198b2
1 changed files with 11 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

13
hosts/hyrule/default.nix
View file

@ -41,6 +41,9 @@ in {
targetHost = "imbored.dev";
targetUser = "ae";
targetPort = 22;
sshOptions = [
"-A" # forward ssh-agent
];
buildOnTarget = false; # build locally then deploy
};
@ -420,10 +423,16 @@ in {
defaults.email = "eclarkboman@gmail.com";
};
sudo.wheelNeedsPassword = true;
sudo = {
enable = true;
wheelNeedsPassword = true;
};
# allow SSH keys for passwordless auth
# TODO: DO NOT USE THIS (create my own alternative to colmena)
pam.services.sudo.sshAgentAuth = true; # pam_ssh_agent_auth module
pam = {
enableSSHAgentAuth = true;
services.sudo.sshAgentAuth = true; # pam_ssh_agent_auth module
};
};
environment.systemPackages = with pkgs; [