Compare commits
No commits in common. "5da7dbabfb7de55bf5c1ef291f4be0dc0944ba8a" and "1833e6708dcfb868f36f3fa9627b05e920e0bd1f" have entirely different histories.
5da7dbabfb
...
1833e6708d
2 changed files with 0 additions and 30 deletions
|
|
@ -310,7 +310,6 @@
|
||||||
|
|
||||||
ignoreregex =
|
ignoreregex =
|
||||||
'';
|
'';
|
||||||
|
|
||||||
environment.etc."fail2ban/filter.d/forgejo.local".text = ''
|
environment.etc."fail2ban/filter.d/forgejo.local".text = ''
|
||||||
[Definition]
|
[Definition]
|
||||||
# Matches: ... Failed login attempt for user ... from ip address <HOST>
|
# Matches: ... Failed login attempt for user ... from ip address <HOST>
|
||||||
|
|
@ -319,19 +318,6 @@
|
||||||
|
|
||||||
ignoreregex =
|
ignoreregex =
|
||||||
'';
|
'';
|
||||||
|
|
||||||
environment.etc."magic-update-script.sh".text = ''
|
|
||||||
#!/usr/bin/env bash
|
|
||||||
set -euo pipefail
|
|
||||||
|
|
||||||
echo "Pulling latest container images..."
|
|
||||||
|
|
||||||
${lib.concatMapStringsSep "\n" (name:
|
|
||||||
"docker pull ${config.virtualisation.oci-containers.containers.${name}.image}"
|
|
||||||
) (builtins.attrNames config.virtualisation.oci-containers.containers)}
|
|
||||||
|
|
||||||
echo "All images updated successfully!"
|
|
||||||
'';
|
|
||||||
|
|
||||||
# Virtualisation
|
# Virtualisation
|
||||||
virtualisation = {
|
virtualisation = {
|
||||||
|
|
|
||||||
|
|
@ -57,10 +57,6 @@
|
||||||
# Enable networking
|
# Enable networking
|
||||||
networking.networkmanager.enable = true;
|
networking.networkmanager.enable = true;
|
||||||
|
|
||||||
networking.firewall.allowedTCPPorts = [
|
|
||||||
22
|
|
||||||
];
|
|
||||||
|
|
||||||
nix = {
|
nix = {
|
||||||
extraOptions = ''
|
extraOptions = ''
|
||||||
experimental-features = nix-command flakes impure-derivations ca-derivations
|
experimental-features = nix-command flakes impure-derivations ca-derivations
|
||||||
|
|
@ -103,10 +99,6 @@
|
||||||
"wheel"
|
"wheel"
|
||||||
];
|
];
|
||||||
packages = with pkgs; [ ];
|
packages = with pkgs; [ ];
|
||||||
|
|
||||||
openssh.authorizedKeys.keys = [
|
|
||||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINGHadFhDCUU/ta3p1FQgpm7NExHkyHNrJbNJP6np5w9 kempinger@ins.jku.at"
|
|
||||||
];
|
|
||||||
};
|
};
|
||||||
|
|
||||||
# Allow unfree packages
|
# Allow unfree packages
|
||||||
|
|
@ -143,14 +135,6 @@
|
||||||
enable = true;
|
enable = true;
|
||||||
xwayland.enable = true;
|
xwayland.enable = true;
|
||||||
};
|
};
|
||||||
services.openssh = {
|
|
||||||
enable = true;
|
|
||||||
settings = {
|
|
||||||
PasswordAuthentication = false;
|
|
||||||
KbdInteractiveAuthentication = false;
|
|
||||||
PermitRootLogin = "prohibit-password"; # Allow root with SSH keys only
|
|
||||||
};
|
|
||||||
};
|
|
||||||
|
|
||||||
programs.firefox.enable = true;
|
programs.firefox.enable = true;
|
||||||
programs.fish.enable = true;
|
programs.fish.enable = true;
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue