diff --git a/hosts/osmium/configuration.nix b/hosts/osmium/configuration.nix index 592b3e2..f493457 100644 --- a/hosts/osmium/configuration.nix +++ b/hosts/osmium/configuration.nix @@ -7,6 +7,7 @@ ../../configuration/proxmox-vm ./nixfiles-updated-inputs.nix + ./polkit-test.nix ]; boot.loader.grub.enable = true; diff --git a/hosts/osmium/polkit-test.nix b/hosts/osmium/polkit-test.nix new file mode 100644 index 0000000..61d3af6 --- /dev/null +++ b/hosts/osmium/polkit-test.nix @@ -0,0 +1,29 @@ +{ ... }: + +{ + + security.polkit.enable = true; + security.polkit.extraConfig = '' + polkit.addRule(function(action, subject) { + if ( + action.id == "org.freedesktop.systemd1.manage-units" + && action.lookup("unit") == "update-from-hydra-olimex-esp32-poe.service" + && action.lookup("verb") == "start" + && subject.user == "clerie" + ) { + return polkit.Result.YES; + } + }); + ''; + + services.update-from-hydra.paths.olimex-esp32-poe = { + enable = true; + hydraUrl = "https://hydra.clerie.de"; + hydraProject = "clerie"; + hydraJobset = "olimex-esp32-poe"; + hydraJob = "olimex-esp32-poe"; + nixStoreUri = "https://nix-cache.clerie.de"; + resultPath = "/srv/olimex-esp32-poe"; + }; + +}