Commit 6fc1d009a609

Vincent Demeester <vincent@sbr.pm>
2026-06-30 10:05:55
feat(flake): add praetorian input and nixos module
Pin praetorian to v2.0.0-rc1 and expose its NixOS module, in preparation for gating SSH keys to command-restricted git access on carthage.
main
1 parent 20151fb
Changed files (2)
flake.lock
flake.nix
flake.lock
@@ -734,11 +734,11 @@
         "treefmt-nix": "treefmt-nix_2"
       },
       "locked": {
-        "lastModified": 1781764304,
-        "narHash": "sha256-PESLN9z2WfRSFDWR6ZAeYU4l/Xq7oqqLn7/Myfk1OhE=",
+        "lastModified": 1782714906,
+        "narHash": "sha256-3pX8mc2rLL0UMHN1SILROVUxXFmYPvK+xQcHEZgoXwo=",
         "owner": "numtide",
         "repo": "llm-agents.nix",
-        "rev": "cf6642d1330d158ceee9d4770e085ce86180a0e0",
+        "rev": "70e4e3d55e2ffcdfbd9c89241efcb79a84ca6cb1",
         "type": "github"
       },
       "original": {
@@ -1068,6 +1068,27 @@
         "type": "github"
       }
     },
+    "praetorian": {
+      "inputs": {
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1782773632,
+        "narHash": "sha256-4hq8B+477Mp2VRgwSvM2mmlw5EUDKVe+b/gBGc88ooE=",
+        "owner": "vdemeester",
+        "repo": "praetorian",
+        "rev": "c0be0d4222fc0d8bbf016afcbd4096a811ab2d77",
+        "type": "github"
+      },
+      "original": {
+        "owner": "vdemeester",
+        "ref": "v2.0.0-rc1",
+        "repo": "praetorian",
+        "type": "github"
+      }
+    },
     "pre-commit": {
       "inputs": {
         "flake-compat": "flake-compat_2",
@@ -1194,6 +1215,7 @@
         "nixpkgs-master": "nixpkgs-master",
         "nixpkgs-wip-consolidated": "nixpkgs-wip-consolidated",
         "pass-run": "pass-run",
+        "praetorian": "praetorian",
         "pre-commit-hooks": "pre-commit-hooks",
         "radian": "radian",
         "system-manager": "system-manager",
flake.nix
@@ -130,6 +130,7 @@
         rsync-replica = ./modules/rsync-replica;
         microshift = ./modules/microshift;
         harmonia = ./modules/harmonia;
+        praetorian = inputs.praetorian.nixosModules.praetorian;
       };
 
       # system-manager configurations
@@ -453,5 +454,8 @@
 
     voxtype.url = "github:peteonrails/voxtype/main";
     voxtype.inputs.nixpkgs.follows = "nixpkgs";
+
+    praetorian.url = "github:vdemeester/praetorian/v2.0.0-rc1";
+    praetorian.inputs.nixpkgs.follows = "nixpkgs";
   };
 }