nixos

Archived

This repository has been archived on 2026-07-30. You can view files and clone it. You cannot open issues or pull requests or push a commit.

Files

T

History

beatzaplentyandClaude Sonnet 4.6 5beed2d75c

Check NixOS configurations / eval-hosts (pull_request) Successful in 10m39s

Details

feat(ipa/docker): grant docker access via IPA group membership

Create an IPA group "docker-access" (GID 50010) and pin the local
"docker" group to that GID on all Docker hosts.  Any IPA user in the
docker-access group automatically gains docker socket access through
SSSD supplementary-group resolution — no per-host docker.members
entry needed.

Specific changes:
- variables.nix: add dockerAccessGid = 50010
- modules/docker/enable-service.nix: lib.mkForce docker GID to
  dockerAccessGid, removing the need to name individual IPA users
- modules/build-types/docker.nix: remove direct wayne docker.members
  entry (access now comes from IPA group)
- modules/ipa/client.nix: refactor repeated security.* / systemd.*
  top-level keys into merged attribute sets (fixes statix W20); add
  security.pam.services.lightdm.makeHomeDir so the GUI login path
  also creates the home dir on first login

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-07-28 15:16:05 +10:00

docker.nix

feat(ipa/docker): grant docker access via IPA group membership

2026-07-28 15:16:05 +10:00

gui.nix

feat(gui): enable docker service on workstation

2026-07-28 09:48:59 +10:00

ha-server.nix

feat(ha): promote HA file server to production flake targets

2026-07-27 11:26:37 +10:00

minimal.nix

Expand variables.nix: NFS shares, ports, image size, GC/rotation, Pi host