Users

Multiple kinds of users can make use of our infrastructure. A current list of users is available here.

Adding new users

New users can be added by supplying a fitting configuration in the users.nix module. In case of a password being required, its hash needs to be generated as follows:

nix-shell -p mkpasswd --run 'mkpasswd -sm bcrypt' > /path/to/hashedPasswordFile

The file then needs to be ansible-vault encrypted and added to our secrets repository. This one is only available to members of our GitLab org and usually is cloned as git submodule to ./secrets.

Onboarding a new admin

After confirming the trustworthiness of a new admin, the following actions need to be executed:

• Add them to the admin users
• Add their ssh public key to the flake inputs and specialArgs
• Make them an owner of the GitLab organization
• Add them to our Vaultwarden organization to allow access to passwords and email accounts
• Add them to the Cloudflare Account
• Make them an admin of Discourse