Hacker News Reader

Is the updated system configuration applied on all machines automatically?

I haven’t used Nix personally but I’ve used Guix - I want to go further with it and I’m curious how you’re managing this.

Yes. We're using NixOps which does this by default, though of course it can be configured otherwise.

What about having different access roles for certain people to certain servers?

Is that covered in the NixOS approach as well?

Sounds interesting!

What happens if a user manually places an ssh key in ~/.ssh/ ? Do you have a way to automatically remove those?

You can just modify the sshd_config not to look at the user authorized keys file