X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;ds=sidebyside;f=nixops%2Fmodules%2Fssh%2Fdefault.nix;h=4dc0d65501cb236c39ae306af931c1758abc0751;hb=3a1461cf44102e6cd8cdee5e0f1ff1d7992894ad;hp=81b7751b96ddf5e367383c703995c4eeae9c1374;hpb=0ede7366409e14482017f70f1efc53426279b8d0;p=perso%2FImmae%2FConfig%2FNix.git diff --git a/nixops/modules/ssh/default.nix b/nixops/modules/ssh/default.nix index 81b7751..4dc0d65 100644 --- a/nixops/modules/ssh/default.nix +++ b/nixops/modules/ssh/default.nix @@ -15,9 +15,12 @@ permissions = "0400"; text = myconfig.env.sshd.ldap.password; }]; - system.activationScripts.sshd = '' + system.activationScripts.sshd = { + deps = [ "secrets" ]; + text = '' install -Dm400 -o nobody -g nogroup -T /var/secrets/ssh-ldap /etc/ssh/ldap_password ''; + }; # ssh is strict about parent directory having correct rights, don't # move it in the nix store. environment.etc."ssh/ldap_authorized_keys" = let