commit 5eb77aeabcd73631d9bfa80624d8542709ff615a
parent 84b67312d10655099e7f193308be0c3b76dccd95
Author: Vineet Kumar <git@vineetk.net>
Date: Thu, 14 May 2026 16:44:55 -0400
saklas: remove git's ssh chroot
Diffstat:
2 files changed, 3 insertions(+), 7 deletions(-)
diff --git a/epistemia/deploy.scm b/epistemia/deploy.scm
@@ -1,9 +1,9 @@
(list (machine
- (operating-system (load "systems/saklas_dedi.scm"))
+ (operating-system (load "systems/saklas.scm"))
(environment managed-host-environment-type)
(configuration (machine-ssh-configuration
(host-name "saklas.epistemia")
(system "x86_64-linux")
- (host-key "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILisyUFXdEQHKE42FavKbHHJQJpQAuzbfkmjHrBqZtW2")
+ (host-key "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINmdSO3VpL2Y18LV74dikABLEN2hE/abSlyoaiNn5kiR")
(identity "/data/ssh/id_ed25519")
(safety-checks? #f)))))
diff --git a/epistemia/systems/saklas.scm b/epistemia/systems/saklas.scm
@@ -318,11 +318,7 @@ table inet filter {
(authorized-keys
`(("vin" ,(local-file "/data/ssh/id_ed25519.pub"))
("git" ,(local-file "/data/ssh/id_ed25519.pub"))
- ("root" ,(local-file "/data/ssh/id_ed25519.pub"))))
- (extra-content "\
-Match User git
- ChrootDirectory /data/src/bare
- ForceCommand git-shell\n")))
+ ("root" ,(local-file "/data/ssh/id_ed25519.pub"))))))
(service unbound-service-type
(unbound-configuration
(server