feat: add sandbox path on dev machines for agenix-rekey

This commit is contained in:
oddlama 2023-09-26 16:38:46 +02:00
parent c9f0f1a026
commit 73897f648d
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A

View file

@ -12,6 +12,9 @@
environment.systemPackages = [pkgs.man-pages pkgs.man-pages-posix]; environment.systemPackages = [pkgs.man-pages pkgs.man-pages-posix];
environment.enableDebugInfo = true; environment.enableDebugInfo = true;
# Add the agenix-rekey sandbox path permanently to avoid adding myself to trusted-users
nix.settings.extra-sandbox-paths = ["/var/tmp/agenix-rekey"];
services.nixseparatedebuginfod.enable = true; services.nixseparatedebuginfod.enable = true;
nix.settings.allowed-users = ["nixseparatedebuginfod"]; nix.settings.allowed-users = ["nixseparatedebuginfod"];
} }