poz/niksos
poz/niksos
1
3
Fork 1
Code Issues Pull requests Projects Releases Packages Wiki Activity

add olm to insecure packages on da server (for some reason)

Browse source
This commit is contained in:
jacekpoz 2024-08-25 22:33:45 +02:00
parent bc0975b564
commit 7ec8512531
Signed by: poz
SSH key fingerprint: SHA256:JyLeVWE4bF3tDnFeUpUaJsPsNlJyBldDGV/dIKSLyN8
4 changed files with 15 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
hosts/chmura/configuration.nix
View file

@ -5,6 +5,9 @@
inherit (config.poz.other.system) username;
in {
nixpkgs = {
permittedInsecurePackages = [
"olm-3.2.16"
];
# fuck broadcom
config.allowUnfree = true;
};
@ -65,7 +68,10 @@ in {
services = {
ssh = {
agent.enable = false;
daemon.enable = true;
daemon = {
enable = true;
ports = [ 7312 ];
};
};
syncthing.enable = true;
};

1
hosts/del/ssh.nix
View file

@ -7,6 +7,7 @@
chmura = {
hostName = "192.168.15.2";
publicKey = "ssh-rsa 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";
port = 7312;
user = "chmura";
};
_chmura = chmura // { hostName = "jacekpoz.pl"; };

1
hosts/niks/ssh.nix
View file

@ -7,6 +7,7 @@
chmura = {
hostName = "192.168.15.2";
publicKey = "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDZLEWp9DsF9znp3W6uqP23yMFd8QQs0CmNKTKTanbfRYOqRWw0Jpuryxg7rTU8ioRM5L4zpIqu/v+pt9x76UsWTlFqjk9S35M1g0Kb2QN3czMJj5uA4jtFh47H8+hfBHm2RelPCcJCSmkR9gDa3XcrxlcC642yU4LTObHeHZg0yUDhUwKS8AdybxkPlmXPZ+UPEphq0CIBxU9mnieQMbQtMFnjEnNMDZJnP4BUF/XuWeHwh8yBttlL+hS37aI3hQYwGd5zdkSD9RWha10Nandlmt6+io6KYQgJxRK0c27i2jO7cmEMOz0h/ZnwHpTtRD9ifDTXuWN9l8+prAxsbC9pBsiDHqZ9ESHq7DzvqIeeyrQT0iHDoOPfB2PPCFJZlkFiM7hsWwkMc5Jaol9SjjH1a+B/+BvNGAQDWt1JIZzwE6T9RVQdGph6GMDS4o3gW3Hd8hyVdFhwD5xTJ567SntqsJdhzGH9HU5ybya3MG0WTWw3dLI0aMv/eAWSRx+7ZPE=";
port = 7312;
user = "chmura";
};
_chmura = chmura // { hostName = "jacekpoz.pl"; };

7
modules/services/ssh.nix
View file

@ -9,7 +9,7 @@
inherit (lib.meta) getExe';
inherit (lib.modules) mkIf mkMerge;
inherit (lib.options) mkEnableOption mkOption;
inherit (lib.types) attrsOf bool nullOr number str submodule;
inherit (lib.types) attrsOf bool listOf nullOr number port str submodule;
inherit (lib.strings) concatStrings;
inherit (lib.attrsets) mapAttrsToList;
@ -32,6 +32,10 @@ in {
default = false;
type = bool;
};
ports = mkOption {
description = "ssh ports";
type = listOf port;
};
};
};
};
@ -76,6 +80,7 @@ in {
(mkIf cfg.daemon.enable {
services.openssh = {
enable = true;
inherit (cfg.daemon) ports;
settings = {
PasswordAuthentication = false;
PermitRootLogin = "no";