From 128f2360c7fe6732805396f2c54338c6bfedec2f Mon Sep 17 00:00:00 2001 From: clerie Date: Mon, 8 Apr 2024 08:16:29 +0200 Subject: [PATCH] hosts/hydra-1,hosts/hydra-2: Allow git via http in restricted mode --- hosts/hydra-1/configuration.nix | 2 +- hosts/hydra-2/configuration.nix | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/hosts/hydra-1/configuration.nix b/hosts/hydra-1/configuration.nix index 7bd2095..06309ea 100644 --- a/hosts/hydra-1/configuration.nix +++ b/hosts/hydra-1/configuration.nix @@ -26,7 +26,7 @@ networking.nameservers = [ "2001:638:904:ffcc::3" "2001:638:904:ffcc::4" "141.24.40.3" "141.24.40.4" ]; nix = { - settings.allowed-uris = "http: https: github:"; + settings.allowed-uris = "http: https: git+https: github:"; distributedBuilds = true; buildMachines = [ { diff --git a/hosts/hydra-2/configuration.nix b/hosts/hydra-2/configuration.nix index 8dc1418..e738724 100644 --- a/hosts/hydra-2/configuration.nix +++ b/hosts/hydra-2/configuration.nix @@ -26,7 +26,7 @@ networking.nameservers = [ "2001:638:904:ffcc::3" "2001:638:904:ffcc::4" "141.24.40.3" "141.24.40.4" ]; # Allow Hydra to fetch remote URLs in restricted mode - nix.settings.allowed-uris = "http: https: github:"; + nix.settings.allowed-uris = "http: https: git+https: github:"; services.openssh.settings= { PermitRootLogin = "yes";