felixalb/pvv-nixos-config
1
0
Fork 0
mirror of https://git.pvv.ntnu.no/Drift/pvv-nixos-config.git synced 2026-07-04 09:51:47 +02:00
Code Issues Projects Releases Wiki Activity

fixup! WIP: temmie/userweb: inject users from passwd into httpd sandbox

Browse Source
This commit is contained in:
h7x4
2026-06-07 01:45:59 +09:00
parent e3e4e298be
commit a5bec764f7
2 changed files with 7 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
flake.lock
Generated
+4 -4
View File
@@ -337,11 +337,11 @@
] ]
}, },
"locked": { "locked": {
"lastModified": 1780062186, "lastModified": 1780764154,
"narHash": "sha256-FSkwKO/56i9RddwSydK804fSnIvbczBnFJgr2/m+F9U=", "narHash": "sha256-Xvf9aBNLYDnbDKdtFjp5GEA/rZwVczHZWbJ0hac8Vv4=",
"ref": "main", "ref": "main",
"rev": "db2b19f144af046161b7f9ca69ddaf3f06fcceea", "rev": "8b4541be73ee3bd6c60525b2f42605efe89398c9",
"revCount": 13, "revCount": 14,
"type": "git", "type": "git",
"url": "https://git.pvv.ntnu.no/Projects/passwd2systemd-users.git" "url": "https://git.pvv.ntnu.no/Projects/passwd2systemd-users.git"
}, },
hosts/temmie/services/userweb/default.nix
+3 -5
View File
@@ -312,13 +312,11 @@ in
group-file = "/run/httpd/pamunix-sync/group"; group-file = "/run/httpd/pamunix-sync/group";
output-dir = "/run/httpd/systemd-userdb"; output-dir = "/run/httpd/systemd-userdb";
shadow-file = pkgs.emptyFile; shadow-file = pkgs.emptyFile;
email-domain = "pvv.ntnu.no";
output-passwd = true;
ignore-user-file = toString ./ignore_user_file.txt; ignore-user-file = toString ./ignore_user_file.txt;
ignore-group-file = toString ./ignore_group_file.txt; ignore-group-file = toString ./ignore_group_file.txt;
set-default-umask = "0077";
set-default-mount-no-devices = "true";
set-default-mount-no-suid = "true";
set-default-mount-no-execute = "false";
}; };
in ''${lib.getExe pkgs.passwd2systemd-users} ${args}'') in ''${lib.getExe pkgs.passwd2systemd-users} ${args}'')
"${lib.getExe' pkgs.coreutils "shred"} -u /run/httpd/pamunix-sync/passwd /run/httpd/pamunix-sync/group" "${lib.getExe' pkgs.coreutils "shred"} -u /run/httpd/pamunix-sync/passwd /run/httpd/pamunix-sync/group"