From a93d836d36b123f104e70348d61536b2932a66d6 Mon Sep 17 00:00:00 2001
From: nyanloutre <paul@nyanlout.re>
Date: Fri, 7 Jun 2019 11:57:12 +0200
Subject: [PATCH] =?UTF-8?q?envoi=20mail=20apr=C3=A8s=20login?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 systems/LoutreOS/services.nix | 19 ++++++++++++++++---
 1 file changed, 16 insertions(+), 3 deletions(-)

diff --git a/systems/LoutreOS/services.nix b/systems/LoutreOS/services.nix
index fa29bc8..36493fe 100644
--- a/systems/LoutreOS/services.nix
+++ b/systems/LoutreOS/services.nix
@@ -11,6 +11,16 @@ let
   musique_port = 52349;
   factorio_port = 52351;
   airsonic_port = 4040;
+
+  login_mail_alert = pkgs.writeShellScriptBin "mail_alert.sh" ''
+    if [ "$PAM_TYPE" != "close_session" ]; then
+    ${pkgs.system-sendmail}/bin/sendmail paul@nyanlout.re <<EOF
+    From: root@nyanlout.re
+    Subject: SSH Login: $PAM_USER from $PAM_RHOST
+    `env`
+    EOF
+    fi
+  '';
 in
 
 {
@@ -415,9 +425,12 @@ in
 
   users.groups.acme.members = [ "matrix-synapse" ];
 
-  security.sudo.extraRules = [
-    { commands = [ { command = "${pkgs.smartmontools}/bin/smartctl"; options = [ "NOPASSWD" ]; } ]; users = [ "telegraf" ]; }
-  ];
+  security = {
+    sudo.extraRules = [
+      { commands = [ { command = "${pkgs.smartmontools}/bin/smartctl"; options = [ "NOPASSWD" ]; } ]; users = [ "telegraf" ]; }
+    ];
+    pam.services.sshd.text = pkgs.lib.mkDefault( pkgs.lib.mkAfter "session optional ${pkgs.pam}/lib/security/pam_exec.so seteuid ${login_mail_alert}/bin/mail_alert.sh" );
+  };
 
   networking = {
     wireguard.interfaces = {