noa/nixconf
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: use sandbox

Browse source
This commit is contained in:
Noa Aarts 2024-10-23 15:56:19 +02:00
parent c4b68e358f
commit 3b2e272cb3
Signed by: noa
GPG key ID: 1850932741EFF672
1 changed files with 7 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

16
hosts/lambdaos/configuration.nix
View file

@ -43,16 +43,14 @@
};
};
nix.sshServe = {
enable = true;
keys =
[
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILRZXNqs7FgVeTCt2ElOARt5f/bR1gjk5bS+zCJA6C1P root@nuOS"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII7X17VovmxkwhKxIg795yO1Sf7dwO50pybMRlUDLLcA hydra@nuOS"
];
write = true;
};
nix.settings = {
trusted-users = [ "noa" ];
sandbox = true;
show-trace = true;
system-features = [ "big-parallel" "kvm" "recursive-nix" ];
sandbox-paths = [ "/bin/sh=${pkgs.busybox-sandbox-shell.out}/bin/busybox" ];
};
# Allow unfree packages
nixpkgs.config = {