fix(security): remove container daemon group access

This commit is contained in:
Ryan Yin
2026-09-01 19:17:39 +08:00
parent dc261e2934
commit 13436c0c31
3 changed files with 12 additions and 2 deletions
@@ -0,0 +1,4 @@
{
userHasDockerAccess = false;
userHasPodmanAccess = false;
}
@@ -0,0 +1,8 @@
{ outputs, ... }:
let
userGroups = outputs.nixosConfigurations.ai-niri.config.users.users.ryan.extraGroups;
in
{
userHasDockerAccess = builtins.elem "docker" userGroups;
userHasPodmanAccess = builtins.elem "podman" userGroups;
}