1
Fork 0
satellite/hosts/nixos/lapetus/services/guacamole/default.nix

18 lines
439 B
Nix

{ config, ... }:
{
sops.secrets.guacamoleUsers.sopsFile = ../../secrets.yaml;
satellite.nginx.at.guacamole.port = 8443; # default tomcat port
services.guacamole-server = {
enable = true;
userMappingXml = config.sops.secrets.guacamoleUsers.path;
};
services.guacamole-client = {
enable = true;
};
# Allow ssh-ing using the provided key
users.users.pilot.openssh.authorizedKeys.keyFiles = [ ./ed25519.pub ];
}