Commit 48c01cb991b6

Vincent Demeester <vincent@sbr.pm>
2026-07-28 17:17:18
feat(carthage): add kyushu-git praetorian gate
Same permissions as aomi-git: full git push+pull on any repo under ~/git. Required for kyushu TPM key to clone passage and home repos.
main
1 parent 8d8f59c
Changed files (1)
systems
carthage
extra.nix
systems/carthage/extra.nix
@@ -157,6 +157,23 @@ in
           num_args = 1;
         };
       };
+      # kyushu TPM key: full git push + pull on any repo under ~/git.
+      kyushu-git.allow = {
+        "git-receive-pack" = {
+          arg = {
+            pos = 1;
+            glob = "/home/vincent/git/**";
+          };
+          num_args = 1;
+        };
+        "git-upload-pack" = {
+          arg = {
+            pos = 1;
+            glob = "/home/vincent/git/**";
+          };
+          num_args = 1;
+        };
+      };
       # Passage sync keys: pull-only on the passage store repo.
       passage-pull.allow = {
         "git-upload-pack" = {