retooled rdp.nix
This commit is contained in:
@@ -19,10 +19,18 @@ lib.mkIf config.sovran_systemsOS.features.rdp {
|
|||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
|
systemd.tmpfiles.rules = [
|
||||||
|
"d /var/lib/gnome-remote-desktop 0750 gnome-remote-desktop gnome-remote-desktop -"
|
||||||
|
"d /var/lib/gnome-remote-desktop/.local 0750 gnome-remote-desktop gnome-remote-desktop -"
|
||||||
|
"d /var/lib/gnome-remote-desktop/.local/share 0750 gnome-remote-desktop gnome-remote-desktop -"
|
||||||
|
"d /var/lib/gnome-remote-desktop/.local/share/gnome-remote-desktop 0750 gnome-remote-desktop gnome-remote-desktop -"
|
||||||
|
];
|
||||||
|
|
||||||
systemd.services.gnome-remote-desktop-setup = {
|
systemd.services.gnome-remote-desktop-setup = {
|
||||||
description = "Configure GNOME Remote Desktop RDP";
|
description = "Configure GNOME Remote Desktop RDP";
|
||||||
wantedBy = [ "multi-user.target" ];
|
wantedBy = [ "multi-user.target" ];
|
||||||
before = [ "gnome-remote-desktop.service" ];
|
before = [ "gnome-remote-desktop.service" ];
|
||||||
|
after = [ "systemd-tmpfiles-setup.service" ];
|
||||||
serviceConfig = {
|
serviceConfig = {
|
||||||
Type = "oneshot";
|
Type = "oneshot";
|
||||||
RemainAfterExit = true;
|
RemainAfterExit = true;
|
||||||
@@ -35,8 +43,8 @@ lib.mkIf config.sovran_systemsOS.features.rdp {
|
|||||||
script = ''
|
script = ''
|
||||||
# Generate a default password file if one doesn't exist
|
# Generate a default password file if one doesn't exist
|
||||||
if [ ! -f /var/lib/gnome-remote-desktop/rdp-password ]; then
|
if [ ! -f /var/lib/gnome-remote-desktop/rdp-password ]; then
|
||||||
mkdir -p /var/lib/gnome-remote-desktop
|
|
||||||
openssl rand -base64 16 > /var/lib/gnome-remote-desktop/rdp-password
|
openssl rand -base64 16 > /var/lib/gnome-remote-desktop/rdp-password
|
||||||
|
chown gnome-remote-desktop:gnome-remote-desktop /var/lib/gnome-remote-desktop/rdp-password
|
||||||
chmod 600 /var/lib/gnome-remote-desktop/rdp-password
|
chmod 600 /var/lib/gnome-remote-desktop/rdp-password
|
||||||
echo "Generated new RDP password at /var/lib/gnome-remote-desktop/rdp-password"
|
echo "Generated new RDP password at /var/lib/gnome-remote-desktop/rdp-password"
|
||||||
fi
|
fi
|
||||||
|
|||||||
Reference in New Issue
Block a user