make snorlax into git server

2 files changed, 8 insertions, 3 deletions

diff --git a/flake.nix b/flake.nix
index 713b3b9..950e749 100644
--- a/flake.nix
+++ b/flake.nix
@@ -101,9 +101,11 @@
               throw "Have you forgotten to run nixos-anywhere with `--generate-hardware-config nixos-facter ./hardware/snorlax.json`?";
         }
 
-        ./roles/server.nix
         ./hardware/snorlax-disks.nix
         ./configuration/snorlax.nix
+
+        ./roles/server.nix
+        ./roles/git-server.nix
       ];
     };
   };
diff --git a/roles/git-server.nix b/roles/git-server.nix
index aea0b18..2e6e0f7 100644
--- a/roles/git-server.nix
+++ b/roles/git-server.nix
@@ -1,7 +1,10 @@
 { ... }:
 {
-  users.users.git.isNormalUser = true;
-  services.openssh.AllowUsers = [ "git" ];
+  users.users.git = {
+    isSystemUser = true;
+    hashedPassword = "$6$/HNLIUOZZmm/OZjK$.t6uB3L2vHq9oSfMv7421ubA3xv3NuCu8zAguQalNt7X5uj9ZuZbXJW3/VTfnIrY9S8KIq.YQ8hgEyts0RLAq0";
+  };
+  services.openssh.settings.AllowUsers = [ "git" ];
   services.gitea = {
     enable = true;
     appName = "JAP56 Git Server";