37 lines
1.2 KiB
Nix
37 lines
1.2 KiB
Nix
{
|
|
lib,
|
|
pkgs,
|
|
...
|
|
}: let
|
|
create_users = host: {
|
|
users.users."${host.username}" = {
|
|
createHome = false;
|
|
home = "/home/chroot/" + host.username;
|
|
isNormalUser = false;
|
|
isSystemUser = true;
|
|
group = "sftp_users";
|
|
openssh.authorizedKeys.keys = [host.key];
|
|
shell = null;
|
|
};
|
|
};
|
|
|
|
users = [
|
|
{
|
|
username = "git.cloonar.com";
|
|
key = "ssh-rsa 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 root@git";
|
|
}
|
|
];
|
|
in {
|
|
imports = builtins.map create_users users;
|
|
|
|
users.groups = {sftp_users = {};};
|
|
|
|
services.openssh.extraConfig = ''
|
|
Match Group sftp_users
|
|
X11Forwarding no
|
|
AllowTcpForwarding no
|
|
ChrootDirectory %h
|
|
ForceCommand internal-sftp
|
|
'';
|
|
}
|