From 0b7f25e01734bf2907a0907bfcfc6b8be46b5480 Mon Sep 17 00:00:00 2001 From: clerie Date: Sun, 7 Apr 2024 20:36:50 +0200 Subject: [PATCH] hosts/hydra-1,hosts/hydra-2: Allow http as schema in restricted mode and not only as prefix --- hosts/hydra-1/configuration.nix | 2 +- hosts/hydra-2/configuration.nix | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/hosts/hydra-1/configuration.nix b/hosts/hydra-1/configuration.nix index 7a6fad8..7bd2095 100644 --- a/hosts/hydra-1/configuration.nix +++ b/hosts/hydra-1/configuration.nix @@ -26,7 +26,7 @@ networking.nameservers = [ "2001:638:904:ffcc::3" "2001:638:904:ffcc::4" "141.24.40.3" "141.24.40.4" ]; nix = { - settings.allowed-uris = "http:// https:// github:"; + settings.allowed-uris = "http: https: github:"; distributedBuilds = true; buildMachines = [ { diff --git a/hosts/hydra-2/configuration.nix b/hosts/hydra-2/configuration.nix index dee0d0a..8dc1418 100644 --- a/hosts/hydra-2/configuration.nix +++ b/hosts/hydra-2/configuration.nix @@ -26,7 +26,7 @@ networking.nameservers = [ "2001:638:904:ffcc::3" "2001:638:904:ffcc::4" "141.24.40.3" "141.24.40.4" ]; # Allow Hydra to fetch remote URLs in restricted mode - nix.settings.allowed-uris = "http:// https:// github:"; + nix.settings.allowed-uris = "http: https: github:"; services.openssh.settings= { PermitRootLogin = "yes";