mirror of
https://codeberg.org/jopejoe1/nix-conf.git
synced 2025-01-04 08:06:50 +01:00
split ssh away from nix
This commit is contained in:
parent
08e8414488
commit
dff0d40777
9 changed files with 26 additions and 13 deletions
|
@ -18,6 +18,7 @@
|
||||||
./plasma/6.nix
|
./plasma/6.nix
|
||||||
./printing
|
./printing
|
||||||
./repo-sync
|
./repo-sync
|
||||||
|
./ssh
|
||||||
./steam
|
./steam
|
||||||
./users
|
./users
|
||||||
self.inputs.home-manager.nixosModules.home-manager
|
self.inputs.home-manager.nixosModules.home-manager
|
||||||
|
|
|
@ -59,14 +59,6 @@ in {
|
||||||
};
|
};
|
||||||
|
|
||||||
system.stateVersion = "24.05";
|
system.stateVersion = "24.05";
|
||||||
services.openssh = {
|
|
||||||
enable = true;
|
|
||||||
banner = "Hackers are in Your System!!!";
|
|
||||||
settings = {
|
|
||||||
PasswordAuthentication = false;
|
|
||||||
PermitRootLogin = "prohibit-password";
|
|
||||||
};
|
|
||||||
};
|
|
||||||
systemd.services.nix-daemon.serviceConfig.LimitNOFILE = lib.mkForce 1048576000;
|
systemd.services.nix-daemon.serviceConfig.LimitNOFILE = lib.mkForce 1048576000;
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
18
modules/ssh/default.nix
Normal file
18
modules/ssh/default.nix
Normal file
|
@ -0,0 +1,18 @@
|
||||||
|
{ config, lib, pkgs, self, ... }:
|
||||||
|
|
||||||
|
let cfg = config.jopejoe1.ssh;
|
||||||
|
in {
|
||||||
|
options.jopejoe1.ssh = { enable = lib.mkEnableOption "Enable ssh"; };
|
||||||
|
|
||||||
|
config = lib.mkIf cfg.enable {
|
||||||
|
services.openssh = {
|
||||||
|
enable = true;
|
||||||
|
banner = "Hackers are in Your System!!!";
|
||||||
|
settings = {
|
||||||
|
PasswordAuthentication = false;
|
||||||
|
PermitRootLogin = "prohibit-password";
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
|
@ -11,6 +11,7 @@
|
||||||
overlays.enable = true;
|
overlays.enable = true;
|
||||||
jopejoe1.enable = true;
|
jopejoe1.enable = true;
|
||||||
root.enable = true;
|
root.enable = true;
|
||||||
|
ssh.enable = true;
|
||||||
};
|
};
|
||||||
|
|
||||||
networking = {
|
networking = {
|
||||||
|
|
|
@ -27,6 +27,7 @@
|
||||||
plasma.enable = true;
|
plasma.enable = true;
|
||||||
root.enable = true;
|
root.enable = true;
|
||||||
jopejoe1.enable = true;
|
jopejoe1.enable = true;
|
||||||
|
ssh.enable = true;
|
||||||
};
|
};
|
||||||
|
|
||||||
networking = {
|
networking = {
|
||||||
|
|
|
@ -23,6 +23,7 @@
|
||||||
printing.enable = true;
|
printing.enable = true;
|
||||||
overlays.enable = true;
|
overlays.enable = true;
|
||||||
steam.enable = true;
|
steam.enable = true;
|
||||||
|
ssh.enable = true;
|
||||||
asf.enable = true;
|
asf.enable = true;
|
||||||
minecraft-server.enable = true;
|
minecraft-server.enable = true;
|
||||||
repo-sync.enable = true;
|
repo-sync.enable = true;
|
||||||
|
@ -93,7 +94,6 @@
|
||||||
mumble
|
mumble
|
||||||
sshfs
|
sshfs
|
||||||
|
|
||||||
|
|
||||||
# Theming
|
# Theming
|
||||||
catppuccin-kvantum
|
catppuccin-kvantum
|
||||||
catppuccin-kde
|
catppuccin-kde
|
||||||
|
|
|
@ -17,8 +17,7 @@
|
||||||
nvidiaBusId = "PCI:1:0:0";
|
nvidiaBusId = "PCI:1:0:0";
|
||||||
};
|
};
|
||||||
|
|
||||||
boot.initrd.availableKernelModules =
|
boot.initrd.availableKernelModules = [ "vmd" "xhci_pci" "ahci" "nvme" "usbhid" "sd_mod" "sr_mod" ];
|
||||||
[ "vmd" "xhci_pci" "ahci" "nvme" "usbhid" "sd_mod" "sr_mod" ];
|
|
||||||
boot.initrd.kernelModules = [ ];
|
boot.initrd.kernelModules = [ ];
|
||||||
boot.kernelModules = [ "kvm-intel" ];
|
boot.kernelModules = [ "kvm-intel" ];
|
||||||
boot.extraModulePackages = [ ];
|
boot.extraModulePackages = [ ];
|
||||||
|
@ -73,6 +72,5 @@
|
||||||
|
|
||||||
#nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
|
#nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
|
||||||
powerManagement.cpuFreqGovernor = lib.mkDefault "ondemand";
|
powerManagement.cpuFreqGovernor = lib.mkDefault "ondemand";
|
||||||
hardware.cpu.intel.updateMicrocode =
|
hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
|
||||||
lib.mkDefault config.hardware.enableRedistributableFirmware;
|
|
||||||
}
|
}
|
||||||
|
|
|
@ -17,6 +17,7 @@
|
||||||
nix.enable = true;
|
nix.enable = true;
|
||||||
root.enable = true;
|
root.enable = true;
|
||||||
boot.systemd.enable = true;
|
boot.systemd.enable = true;
|
||||||
|
ssh.enable = true;
|
||||||
};
|
};
|
||||||
|
|
||||||
networking = { hostName = "tuny"; };
|
networking = { hostName = "tuny"; };
|
||||||
|
|
|
@ -15,6 +15,7 @@
|
||||||
printing.enable = true;
|
printing.enable = true;
|
||||||
jopejoe1.enable = true;
|
jopejoe1.enable = true;
|
||||||
root.enable = true;
|
root.enable = true;
|
||||||
|
ssh.enable = true;
|
||||||
};
|
};
|
||||||
|
|
||||||
networking = {
|
networking = {
|
||||||
|
|
Loading…
Reference in a new issue