From 530dec28da62ebf612fe9f094db0dd6e9c7f5515 Mon Sep 17 00:00:00 2001
From: Jasper Ras <jras@hostnet.nl>
Date: Mon, 3 Feb 2025 20:54:08 +0100
Subject: make snorlax into git server

---
 flake.nix            | 4 +++-
 roles/git-server.nix | 7 +++++--
 2 files changed, 8 insertions(+), 3 deletions(-)

diff --git a/flake.nix b/flake.nix
index 713b3b9..950e749 100644
--- a/flake.nix
+++ b/flake.nix
@@ -101,9 +101,11 @@
               throw "Have you forgotten to run nixos-anywhere with `--generate-hardware-config nixos-facter ./hardware/snorlax.json`?";
         }
 
-        ./roles/server.nix
         ./hardware/snorlax-disks.nix
         ./configuration/snorlax.nix
+
+        ./roles/server.nix
+        ./roles/git-server.nix
       ];
     };
   };
diff --git a/roles/git-server.nix b/roles/git-server.nix
index aea0b18..2e6e0f7 100644
--- a/roles/git-server.nix
+++ b/roles/git-server.nix
@@ -1,7 +1,10 @@
 { ... }:
 {
-  users.users.git.isNormalUser = true;
-  services.openssh.AllowUsers = [ "git" ];
+  users.users.git = {
+    isSystemUser = true;
+    hashedPassword = "$6$/HNLIUOZZmm/OZjK$.t6uB3L2vHq9oSfMv7421ubA3xv3NuCu8zAguQalNt7X5uj9ZuZbXJW3/VTfnIrY9S8KIq.YQ8hgEyts0RLAq0";
+  };
+  services.openssh.settings.AllowUsers = [ "git" ];
   services.gitea = {
     enable = true;
     appName = "JAP56 Git Server";
-- 
cgit v1.2.3