back to root

modules/k3s/deployments/storage-combo.nix

@@ -35,12 +35,9 @@
                 #   }
                 # ];
                 securityContext = {
-                  allowPrivilegeEscalation = true;
                   capabilities.add = ["SYS_ADMIN"];
-                  seccompProfile.type = "RuntimeDefault";
+                  runAsUser = 0;
-                  runAsNonRoot = true;
+                  runAsGroup = 0;
-                  runAsUser = 1000;
-                  runAsGroup = 1000;
                 };
               }
             ];

modules/k3s/images/rsshfs-server.nix

@@ -26,8 +26,8 @@ let
     KbdInteractiveAuthentication no
     PubkeyAuthentication no
 
-    PermitRootLogin no
+    PermitRootLogin yes
-    AllowUsers dev
+    AllowUsers root
 
     AllowTcpForwarding yes
     X11Forwarding no

modules/k3s/services/default.nix

@@ -1,8 +0,0 @@
-{ cfg, lib, inputs, ... }:
-let
-  manifests = [
-    
-  ];
-  imported = map ( n: import n { inherit cfg lib inputs; } ) manifests;
-in
-  lib.foldl' lib.recursiveUpdate {} imported