diff --git a/colmena/remote.nix b/colmena/remote.nix index efe4e6e..47191f7 100644 --- a/colmena/remote.nix +++ b/colmena/remote.nix @@ -3,9 +3,13 @@ { deployment = { targetHost = "${name}.birdsong.network"; + targetUser = "qenya"; tags = [ "remote" ]; }; + # Required for remote builds + security.sudo.wheelNeedsPassword = false; + imports = [ ../common/openssh.nix ]; diff --git a/common/openssh.nix b/common/openssh.nix index 5e9651a..6715088 100644 --- a/common/openssh.nix +++ b/common/openssh.nix @@ -12,9 +12,4 @@ services.fail2ban.enable = true; networking.firewall.allowedTCPPorts = [ 22 ]; - - # Allow remote root login only from home network - # TODO: Find a less hacky way of doing remote deployment - users.users.root.openssh.authorizedKeys.keys = config.users.users.qenya.openssh.authorizedKeys.keys; - services.openssh.extraConfig = "Match Address 45.14.17.200\n PermitRootLogin prohibit-password"; } \ No newline at end of file