002bd382e9
Some checks failed
Cache: Publish Nix / Publish Nix Cache (push) Waiting to run
Build Rust / Cargo Test (push) Successful in 4m14s
Build Site / Next.js Build (push) Failing after 6s
Infra: OpenTofu / OpenTofu (grafana) (push) Successful in 5s
Lint Governance / BEP Metadata (push) Successful in 0s
Build: Android / Android Rust Core Stub (push) Failing after 23s
116 lines
2.5 KiB
Nix
116 lines
2.5 KiB
Nix
{
|
|
groups = {
|
|
users = "burrow-users";
|
|
admins = "burrow-admins";
|
|
automation = "burrow-automation";
|
|
linear = {
|
|
owners = "linear-owners";
|
|
admins = "linear-admins";
|
|
guests = "linear-guests";
|
|
};
|
|
};
|
|
|
|
identities = {
|
|
contact = {
|
|
displayName = "Burrow";
|
|
canonicalEmail = "contact@burrow.net";
|
|
isAdmin = true;
|
|
forgeAuthorized = true;
|
|
bootstrapAuthentik = true;
|
|
sshPublicKeyPath = ./nixos/keys/contact_at_burrow_net.pub;
|
|
roles = [
|
|
"operator"
|
|
"forge-admin"
|
|
];
|
|
};
|
|
|
|
conrad = {
|
|
displayName = "Conrad Kramer";
|
|
canonicalEmail = "conrad@burrow.net";
|
|
isAdmin = true;
|
|
forgeAuthorized = false;
|
|
bootstrapAuthentik = true;
|
|
roles = [
|
|
"operator"
|
|
"founder"
|
|
];
|
|
};
|
|
|
|
jett = {
|
|
displayName = "Jett";
|
|
canonicalEmail = "jett@burrow.net";
|
|
isAdmin = true;
|
|
forgeAuthorized = false;
|
|
forgeUnixUser = true;
|
|
bootstrapAuthentik = true;
|
|
sshPublicKeyPath = ./nixos/keys/jett_at_burrow_net.pub;
|
|
roles = [
|
|
"member"
|
|
"operator"
|
|
"forge-admin"
|
|
];
|
|
};
|
|
|
|
davnotdev = {
|
|
displayName = "David";
|
|
canonicalEmail = "davnotdev@burrow.net";
|
|
isAdmin = true;
|
|
forgeAuthorized = false;
|
|
bootstrapAuthentik = true;
|
|
roles = [
|
|
"member"
|
|
"operator"
|
|
"forge-admin"
|
|
];
|
|
};
|
|
|
|
agent = {
|
|
displayName = "Burrow Agent";
|
|
canonicalEmail = "agent@burrow.net";
|
|
isAdmin = false;
|
|
forgeAuthorized = true;
|
|
bootstrapAuthentik = false;
|
|
sshPublicKeyPath = ./nixos/keys/agent_at_burrow_net.pub;
|
|
roles = [
|
|
"automation"
|
|
];
|
|
};
|
|
|
|
release = {
|
|
displayName = "Burrow Release";
|
|
canonicalEmail = "release@burrow.net";
|
|
isAdmin = false;
|
|
forgeAuthorized = false;
|
|
bootstrapAuthentik = false;
|
|
roles = [
|
|
"automation"
|
|
"release"
|
|
];
|
|
};
|
|
|
|
namespace = {
|
|
displayName = "Burrow Namespace";
|
|
canonicalEmail = "namespace@burrow.net";
|
|
isAdmin = false;
|
|
forgeAuthorized = false;
|
|
bootstrapAuthentik = false;
|
|
roles = [
|
|
"automation"
|
|
"namespace-runners"
|
|
];
|
|
};
|
|
|
|
ui-test = {
|
|
displayName = "Burrow UI Test";
|
|
canonicalEmail = "ui-test@burrow.net";
|
|
isAdmin = false;
|
|
forgeAuthorized = false;
|
|
bootstrapAuthentik = true;
|
|
authentikPasswordSecret = "burrowAuthentikUiTestPassword";
|
|
roles = [
|
|
"testing"
|
|
"apple-ui"
|
|
];
|
|
};
|
|
};
|
|
}
|