diff --git a/configuration.nix b/configuration.nix index 1bb2c1b..c9534ec 100644 --- a/configuration.nix +++ b/configuration.nix @@ -242,6 +242,9 @@ acl_policy_path = pkgs.writeText "acl_policy.hujson" '' { "groups": { + "group:servers": [ + "samsehu", + ], "group:admin": [ "geemili", "desttinghim", @@ -257,9 +260,9 @@ "ssh": [ { "action": "accept", - "src": ["autogroup:member"], - "dst": ["autogroup:self"], - "users": ["autogroup:nonroot"], + "src": ["group:admin"], + "dst": ["group:servers"], + "users": ["group:admin", "geemili", "desttinghim"], }, ], } @@ -308,7 +311,12 @@ ]; # Use systemd-resolved and set networkmanager to allow mdns - services.resolved.enable = true; + services.resolved = { + enable = true; + extraConfig = '' + DNSStubListener=false + ''; + }; networking.networkmanager.connectionConfig."connection.mdns" = 2; # 2 == yes # Copy the NixOS configuration file and link it from the resulting system