diff --git a/configuration/default.nix b/configuration/default.nix index 924474a..f2d1615 100644 --- a/configuration/default.nix +++ b/configuration/default.nix @@ -117,11 +117,11 @@ sudo.execWheelOnly = true; pam = { - sshAgentAuth = { + rssh = { enable = true; - authorizedKeysFiles = [ "/etc/ssh/authorized_keys.d/%u" ]; + settings.auth_key_file = "/etc/ssh/authorized_keys.d/$ruser"; }; - services.sudo.sshAgentAuth = true; + services.sudo.rssh = true; }; }; diff --git a/flake.lock b/flake.lock index 5516bf3..a62c357 100644 --- a/flake.lock +++ b/flake.lock @@ -300,11 +300,11 @@ ] }, "locked": { - "lastModified": 1758287904, - "narHash": "sha256-IGmaEf3Do8o5Cwp1kXBN1wQmZwQN3NLfq5t4nHtVtcU=", + "lastModified": 1760701190, + "narHash": "sha256-y7UhnWlER8r776JsySqsbTUh2Txf7K30smfHlqdaIQw=", "owner": "nix-community", "repo": "disko", - "rev": "67ff9807dd148e704baadbd4fd783b54282ca627", + "rev": "3a9450b26e69dcb6f8de6e2b07b3fc1c288d85f5", "type": "github" }, "original": { @@ -746,11 +746,11 @@ }, "nixpkgs_2": { "locked": { - "lastModified": 1759008180, - "narHash": "sha256-hVpxYhilbBxQj0D6u6hUb6OXhNl85xIdhUE23AmqBdA=", + "lastModified": 1760782625, + "narHash": "sha256-qeSmHF66cMiHObiBhm8IngmqDBEcqNdBSSoAjuE6tTw=", "owner": "nixos", "repo": "nixpkgs", - "rev": "9a51fe84a7214f70a17e5d7ce085385baa24ee29", + "rev": "f2ee78c4eb601be36a277e1779a7a87655419dad", "type": "github" }, "original": { @@ -1079,11 +1079,11 @@ ] }, "locked": { - "lastModified": 1759030640, - "narHash": "sha256-53VP3BqMXJqD1He1WADTFyUnpta3mie56H7nC59tSic=", + "lastModified": 1760393368, + "narHash": "sha256-8mN3kqyqa2PKY0wwZ2UmMEYMcxvNTwLaOrrDsw6Qi4E=", "owner": "Mic92", "repo": "sops-nix", - "rev": "9ac51832c70f2ff34fcc97b05fa74b4a78317f9e", + "rev": "ab8d56e85b8be14cff9d93735951e30c3e86a437", "type": "github" }, "original": { diff --git a/pkgs/packages/crowdsec-hub.nix b/pkgs/packages/crowdsec-hub.nix index 0862b9f..3d0ad28 100644 --- a/pkgs/packages/crowdsec-hub.nix +++ b/pkgs/packages/crowdsec-hub.nix @@ -14,8 +14,8 @@ stdenvNoCC.mkDerivation (drv: { src = fetchFromGitHub { owner = "crowdsecurity"; repo = "hub"; - rev = "2c5a8cb7b61ad56d7107a1ce5b2a0503fd647eda"; - hash = "sha256-3R7aHzChKaOvghkCb/YyQ6H/WR4U18YobiUCQUrwYQ4="; + rev = "b63d9e925cfdd70f818a6a136ea53d5c8ca96d9a"; + hash = "sha256-FMArGnR/pI/QlzsznStp8vzs/LbXooVgLdoTw+eSbec="; }; installPhase = ''