Sovran_Systems/Sovran_SystemsOS
1
0
Fork 0
Code Issues Pull Requests 1 Packages Projects Releases Wiki Activity

retooled rdp.nix

Browse Source
This commit is contained in:
naturallaw77
2026-03-25 13:01:10 -05:00
parent b513447be8
commit 2c15341d35
1 changed files with 8 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
modules/rdp.nix
View File

@@ -10,7 +10,6 @@ lib.mkIf config.sovran_systemsOS.features.rdp {
freerdp freerdp
]; ];
# gnome-remote-desktop ships a system service that needs to be explicitly enabled
systemd.services.gnome-remote-desktop = { systemd.services.gnome-remote-desktop = {
wantedBy = [ "graphical.target" ]; wantedBy = [ "graphical.target" ];
after = [ "graphical.target" ]; after = [ "graphical.target" ];
@@ -20,7 +19,6 @@ lib.mkIf config.sovran_systemsOS.features.rdp {
}; };
}; };
# Configure RDP credentials and enable RDP mode on first boot
systemd.services.gnome-remote-desktop-setup = { systemd.services.gnome-remote-desktop-setup = {
description = "Configure GNOME Remote Desktop RDP"; description = "Configure GNOME Remote Desktop RDP";
wantedBy = [ "multi-user.target" ]; wantedBy = [ "multi-user.target" ];
@@ -29,22 +27,22 @@ lib.mkIf config.sovran_systemsOS.features.rdp {
Type = "oneshot"; Type = "oneshot";
RemainAfterExit = true; RemainAfterExit = true;
}; };
path = [ pkgs.gnome-remote-desktop ]; path = [
pkgs.gnome-remote-desktop
pkgs.polkit
pkgs.openssl
];
script = '' script = ''
# Enable RDP backend
grdctl --system rdp enable
# Disable requiring a prompt/handshake for unattended access
grdctl --system rdp set-credentials sovran "$(cat /var/lib/gnome-remote-desktop/rdp-password 2>/dev/null || echo 'changeme')"
# Generate a default password file if one doesn't exist # Generate a default password file if one doesn't exist
if [ ! -f /var/lib/gnome-remote-desktop/rdp-password ]; then if [ ! -f /var/lib/gnome-remote-desktop/rdp-password ]; then
mkdir -p /var/lib/gnome-remote-desktop mkdir -p /var/lib/gnome-remote-desktop
${pkgs.openssl}/bin/openssl rand -base64 16 > /var/lib/gnome-remote-desktop/rdp-password openssl rand -base64 16 > /var/lib/gnome-remote-desktop/rdp-password
chmod 600 /var/lib/gnome-remote-desktop/rdp-password chmod 600 /var/lib/gnome-remote-desktop/rdp-password
echo "Generated new RDP password at /var/lib/gnome-remote-desktop/rdp-password" echo "Generated new RDP password at /var/lib/gnome-remote-desktop/rdp-password"
fi fi
# Enable RDP backend and set credentials
grdctl --system rdp enable
grdctl --system rdp set-credentials sovran "$(cat /var/lib/gnome-remote-desktop/rdp-password)" grdctl --system rdp set-credentials sovran "$(cat /var/lib/gnome-remote-desktop/rdp-password)"
''; '';
}; };