X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=nixops%2Fmodules%2Fssh%2Fdefault.nix;h=4dc0d65501cb236c39ae306af931c1758abc0751;hb=bee035b7eb4dfe65f9787ae85beb46cec33a5c2f;hp=81b7751b96ddf5e367383c703995c4eeae9c1374;hpb=362d300efa5bca3bb06e525180a4f0158579fd75;p=perso%2FImmae%2FConfig%2FNix.git diff --git a/nixops/modules/ssh/default.nix b/nixops/modules/ssh/default.nix index 81b7751..4dc0d65 100644 --- a/nixops/modules/ssh/default.nix +++ b/nixops/modules/ssh/default.nix @@ -15,9 +15,12 @@ permissions = "0400"; text = myconfig.env.sshd.ldap.password; }]; - system.activationScripts.sshd = '' + system.activationScripts.sshd = { + deps = [ "secrets" ]; + text = '' install -Dm400 -o nobody -g nogroup -T /var/secrets/ssh-ldap /etc/ssh/ldap_password ''; + }; # ssh is strict about parent directory having correct rights, don't # move it in the nix store. environment.etc."ssh/ldap_authorized_keys" = let