MetzNet
/
system-configs
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

updated soduoers, added group for aws

master
noah metz 2023-12-03 18:17:19 -07:00
parent b3a25143d6
commit 68a831da2b
3 changed files with 34 additions and 26 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
kerberos.metznet.ca.scm
Unescape Escape View File

@ -6,8 +6,7 @@
(metznet machines kerberos)
(metznet system base-system)
(gnu packages vim)
(gnu packages ssh)
(gnu packages python-web)
(gnu packages version-control)
(gnu packages shells))
(operating-system
@ -19,19 +18,22 @@
(device (file-system-label "krb-guix-data"))
(mount-point "/")
(type "ext4")) %base-file-systems))
(groups (cons (user-group
(system? #t)
(name "aws")) %metznet-base-groups))
(users (cons (user-account
(name "aws")
(group "root")
(group "aws")
(shell (file-append zsh "/bin/zsh")))
%metznet-base-user-accounts))
(sudoers-file (plain-file "sudoers"
(string-join (list "Defaults mail_badpass"
(string-join (list
"root ALL=(ALL:ALL) NOPASSWD:ALL"
"%root ALL=(ALL:ALL) NOPASSWD:ALL" "")
"\n")))
"%aws ALL=(ALL:ALL) ALL"
"%aws ALL=(root) NOPASSWD:/run/setuid-programs/passwd" "") "\n")))
(packages (cons* openssh awscli neovim %metznet-base-packages))
(packages (cons* git neovim %metznet-base-packages))
(services
(cons* (service aws-service-type) kerberos-services)))

19
ldap.metznet.ca.scm
Unescape Escape View File

@ -6,8 +6,7 @@
(metznet machines ldap)
(metznet system base-system)
(gnu packages vim)
(gnu packages ssh)
(gnu packages python-web)
(gnu packages version-control)
(gnu packages shells))
(operating-system
@ -19,18 +18,22 @@
(device (file-system-label "ldap-guix-data"))
(mount-point "/")
(type "ext4")) %base-file-systems))
(groups (cons (user-group
(system? #t)
(name "aws")) %metznet-base-groups))
(users (cons (user-account
(name "aws")
(group "root")
(shell (file-append zsh "/bin/zsh"))) %metznet-base-user-accounts))
(group "aws")
(shell (file-append zsh "/bin/zsh")))
%metznet-base-user-accounts))
(sudoers-file (plain-file "sudoers"
(string-join (list "Defaults mail_badpass"
(string-join (list
"root ALL=(ALL:ALL) NOPASSWD:ALL"
"%root ALL=(ALL:ALL) NOPASSWD:ALL" "")
"\n")))
"%aws ALL=(ALL:ALL) ALL"
"%aws ALL=(root) NOPASSWD:/run/setuid-programs/passwd" "") "\n")))
(packages (cons* openssh awscli neovim %metznet-base-packages))
(packages (cons* git neovim %metznet-base-packages))
(services
(cons* (service aws-service-type) ldap-services)))

19
vpn.metznet.ca.scm
Unescape Escape View File

@ -6,8 +6,7 @@
(metznet machines vpn)
(metznet system base-system)
(gnu packages vim)
(gnu packages ssh)
(gnu packages python-web)
(gnu packages version-control)
(gnu packages shells))
(operating-system
@ -19,18 +18,22 @@
(device (file-system-label "vpn-guix-data"))
(mount-point "/")
(type "ext4")) %base-file-systems))
(groups (cons (user-group
(system? #t)
(name "aws")) %metznet-base-groups))
(users (cons (user-account
(name "aws")
(group "root")
(shell (file-append zsh "/bin/zsh"))) %metznet-base-user-accounts))
(group "aws")
(shell (file-append zsh "/bin/zsh")))
%metznet-base-user-accounts))
(sudoers-file (plain-file "sudoers"
(string-join (list "Defaults mail_badpass"
(string-join (list
"root ALL=(ALL:ALL) NOPASSWD:ALL"
"%root ALL=(ALL:ALL) NOPASSWD:ALL" "")
"\n")))
"%aws ALL=(ALL:ALL) ALL"
"%aws ALL=(root) NOPASSWD:/run/setuid-programs/passwd" "") "\n")))
(packages (cons* openssh awscli neovim %metznet-base-packages))
(packages (cons* git neovim %metznet-base-packages))
(services
(cons* (service aws-service-type) vpn-services)))