From fe7fc55c04615ff2f29110eac4e7df6acdd9ab38 Mon Sep 17 00:00:00 2001 From: beatzaplenty Date: Tue, 28 Jul 2026 14:07:29 +1000 Subject: [PATCH] feat(docker): add IPA wayne user to docker group Grants the domain wayne account docker socket access on docker.sweet.home without needing sudo, alongside the existing nixos local user membership. Co-Authored-By: Claude Sonnet 4.6 --- modules/build-types/docker.nix | 3 +++ 1 file changed, 3 insertions(+) diff --git a/modules/build-types/docker.nix b/modules/build-types/docker.nix index d83aa04..d3c3be3 100644 --- a/modules/build-types/docker.nix +++ b/modules/build-types/docker.nix @@ -33,6 +33,9 @@ ]; users.users.${vars.primaryUser}.extraGroups = [ "docker" ]; + # Grant the IPA domain user docker access via the local group so that + # `wayne` can manage containers without sudo. + users.groups.docker.members = [ "wayne" ]; services.openssh.settings.PermitRootLogin = "yes"; networking.firewall.allowedTCPPorts = [