some minor security improvements found by claude

2026-04-26 10:01:18 +02:00
parent 447fc61c0b
commit c5e5b84bfb
4 changed files with 6 additions and 10 deletions
--- a/modules/hardware/remoteBuilder.nix
+++ b/modules/hardware/remoteBuilder.nix
@@ -2,16 +2,17 @@

 {
  users.users.nixremote = {                   # System User
-    isNormalUser = true;
+    isSystemUser = true;
+    group = "nixremote";
    extraGroups = [ "kvm" ];
-    shell = pkgs.zsh;                       # Default shell
    uid = 1001;
-#    initialPassword = "password95";
    openssh.authorizedKeys.keys = [
      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILczsj4W1kFQaalFwaY+RJ4LEzNeFKD+itXB40Q2O59M nixremote@hades"
    ];
  };

+  users.groups.nixremote = {};
+
  nix.settings.trusted-users = [
    "nixremote"
  ];