summaryrefslogtreecommitdiffstats
path: root/makefu/2configs/share-user-sftp.nix
diff options
context:
space:
mode:
authorlassulus <lass@aidsballs.de>2016-01-17 13:22:42 +0100
committerlassulus <lass@aidsballs.de>2016-01-17 13:22:42 +0100
commit8b88007fac9154d0bf7ada6c9ce375989d230d93 (patch)
treec7ab8f2c6de2724133f1a50951a08a3f6f66b775 /makefu/2configs/share-user-sftp.nix
parent63910263ccaf2f18bd83ed6e5d49301601ba53e1 (diff)
parentde891cf43181d28cbc9526993df4e55022d230da (diff)
Merge remote-tracking branch 'gum/master'
Diffstat (limited to 'makefu/2configs/share-user-sftp.nix')
-rw-r--r--makefu/2configs/share-user-sftp.nix21
1 files changed, 21 insertions, 0 deletions
diff --git a/makefu/2configs/share-user-sftp.nix b/makefu/2configs/share-user-sftp.nix
new file mode 100644
index 000000000..2c93143ec
--- /dev/null
+++ b/makefu/2configs/share-user-sftp.nix
@@ -0,0 +1,21 @@
+{ config, ... }:
+
+{
+ users.users = {
+ share = {
+ uid = 9002;
+ home = "/var/empty";
+ openssh.authorizedKeys.keys = [ config.krebs.users.makefu.pubkey ];
+ };
+ };
+ # we will use internal-sftp to make uncomplicated Chroot work
+ services.openssh.extraConfig = ''
+ Match User share
+ ChrootDirectory /media
+ ForceCommand internal-sftp
+ AllowTcpForwarding no
+ PermitTunnel no
+ X11Forwarding no
+ Match All
+ '';
+}