wip: Add host deertopia
This commit is contained in:
21
hosts/deertopia/configuration.nix
Normal file → Executable file
21
hosts/deertopia/configuration.nix
Normal file → Executable file
@@ -10,7 +10,8 @@
|
||||
filesystemType = "btrfs";
|
||||
|
||||
users.users = [
|
||||
"arisu"
|
||||
"lain"
|
||||
"escort"
|
||||
];
|
||||
|
||||
impermanence = {
|
||||
@@ -31,6 +32,11 @@
|
||||
subvolume = "rootfs";
|
||||
};
|
||||
};
|
||||
|
||||
sops = {
|
||||
enable = true;
|
||||
keyFile = "/persist/vault/root/deertopia-key";
|
||||
};
|
||||
};
|
||||
|
||||
boot.loader = {
|
||||
@@ -54,11 +60,20 @@
|
||||
environment.systemPackages = with pkgs; [
|
||||
neovim
|
||||
git
|
||||
sshfs
|
||||
# sydnix-cli.packages.x86_64-linux.default
|
||||
];
|
||||
|
||||
services.openssh.enable = true;
|
||||
services.openssh.settings.PermitRootLogin = "yes";
|
||||
services.openssh = {
|
||||
enable = true;
|
||||
settings = {
|
||||
PermitRootLogin = "yes";
|
||||
X11Forwarding = true;
|
||||
# This server is connected to the internet! Port 22 is open!!
|
||||
# Aagghhhh!!! Stay safe!
|
||||
PasswordAuthentication = false;
|
||||
};
|
||||
};
|
||||
|
||||
# TODO: Move to defaults.
|
||||
users.mutableUsers = false;
|
||||
|
||||
Reference in New Issue
Block a user