Infini-DL360/research: init

hosts/Infini-DL360/default.nix

@@ -25,6 +25,7 @@
     ./postgresql.nix
     ./privoxy.nix
     ./radicale.nix
+    ./research.nix
     ./searx.nix
     ./ssh.nix
     ./thelounge.nix

hosts/Infini-DL360/research.nix

@@ -0,0 +1,32 @@
+{ pkgs, ... }:
+
+{
+  users.users.cs252 = {
+    description = "Guest account for CS 252 researchers";
+    group = "users";
+    isNormalUser = true;
+    shell = pkgs.bash;
+  };
+
+  services.openssh.extraConfig = ''
+    Match user cs252
+      AuthorizedKeysFile /etc/ssh/authorized_keys.d/infinidoge /etc/ssh/authorized_keys.d/%u
+      DisableForwarding yes
+      PasswordAuthentication no
+  '';
+
+  security.pam.loginLimits = [
+    {
+      domain = "cs252";
+      item = "memlock";
+      type = "-";
+      value = "256000000";
+    }
+    {
+      domain = "cs252";
+      item = "as";
+      type = "-";
+      value = "256000000";
+    }
+  ];
+}