retooled rdp.nix

This commit is contained in:
2026-03-25 13:06:23 -05:00
parent 2c15341d35
commit 919bdba7c4

View File

@@ -19,10 +19,18 @@ lib.mkIf config.sovran_systemsOS.features.rdp {
}; };
}; };
systemd.tmpfiles.rules = [
"d /var/lib/gnome-remote-desktop 0750 gnome-remote-desktop gnome-remote-desktop -"
"d /var/lib/gnome-remote-desktop/.local 0750 gnome-remote-desktop gnome-remote-desktop -"
"d /var/lib/gnome-remote-desktop/.local/share 0750 gnome-remote-desktop gnome-remote-desktop -"
"d /var/lib/gnome-remote-desktop/.local/share/gnome-remote-desktop 0750 gnome-remote-desktop gnome-remote-desktop -"
];
systemd.services.gnome-remote-desktop-setup = { systemd.services.gnome-remote-desktop-setup = {
description = "Configure GNOME Remote Desktop RDP"; description = "Configure GNOME Remote Desktop RDP";
wantedBy = [ "multi-user.target" ]; wantedBy = [ "multi-user.target" ];
before = [ "gnome-remote-desktop.service" ]; before = [ "gnome-remote-desktop.service" ];
after = [ "systemd-tmpfiles-setup.service" ];
serviceConfig = { serviceConfig = {
Type = "oneshot"; Type = "oneshot";
RemainAfterExit = true; RemainAfterExit = true;
@@ -35,8 +43,8 @@ lib.mkIf config.sovran_systemsOS.features.rdp {
script = '' script = ''
# Generate a default password file if one doesn't exist # Generate a default password file if one doesn't exist
if [ ! -f /var/lib/gnome-remote-desktop/rdp-password ]; then if [ ! -f /var/lib/gnome-remote-desktop/rdp-password ]; then
mkdir -p /var/lib/gnome-remote-desktop
openssl rand -base64 16 > /var/lib/gnome-remote-desktop/rdp-password openssl rand -base64 16 > /var/lib/gnome-remote-desktop/rdp-password
chown gnome-remote-desktop:gnome-remote-desktop /var/lib/gnome-remote-desktop/rdp-password
chmod 600 /var/lib/gnome-remote-desktop/rdp-password chmod 600 /var/lib/gnome-remote-desktop/rdp-password
echo "Generated new RDP password at /var/lib/gnome-remote-desktop/rdp-password" echo "Generated new RDP password at /var/lib/gnome-remote-desktop/rdp-password"
fi fi