nodes/home.nas: enable x11 forwarding for admins
All checks were successful
bundlewrap/pipeline/head This commit looks good

This commit is contained in:
Franzi 2021-05-01 15:18:21 +02:00
parent 75fea7aa34
commit 8c276b53a6
Signed by: kunsi
GPG key ID: 12E3D2136B818350
3 changed files with 9 additions and 0 deletions

View file

@ -37,3 +37,6 @@ Match Group sftp
Match User ${','.join(sorted(admin_users))}
AllowTcpForwarding yes
% if enable_x_forwarding_for_admins:
X11Forwarding yes
% endif

View file

@ -13,6 +13,7 @@ files = {
'context': {
'login_users': login_users,
'admin_users': users_from_metadata,
'enable_x_forwarding_for_admins': node.metadata.get('openssh/enable_x_forwarding_for_admins', False),
},
'triggers': {
'action:sshd_check_config',

View file

@ -28,6 +28,10 @@ nodes['home.nas'] = {
'unattended_upgrades': {
'day': 6,
},
'packages': {
'mpv': {},
'youtube-dl': {},
},
},
'backups': {
# This *is* the backup server
@ -153,6 +157,7 @@ nodes['home.nas'] = {
'allowed_users': {
'kunsi-t470', # backup user
},
'enable_x_forwarding_for_admins': True,
},
'users': {
'f2k1de': {