75 lines
1.9 KiB
Nix
75 lines
1.9 KiB
Nix
{ config, pkgs, ... }: {
|
|
imports = [
|
|
./hardware-configuration.nix
|
|
];
|
|
|
|
boot.tmp.cleanOnBoot = true;
|
|
|
|
networking.hostName = "djmuk1";
|
|
networking.firewall = {
|
|
enable = true;
|
|
allowedTCPPorts = [ 113 ];
|
|
};
|
|
|
|
services.openssh = {
|
|
enable = true;
|
|
settings = {
|
|
PermitRootLogin = "no";
|
|
PasswordAuthentication = false;
|
|
KbdInteractiveAuthentication = false;
|
|
};
|
|
extraConfig = ''
|
|
#AllowTcpForwarding yes
|
|
X11Forwarding no
|
|
AllowAgentForwarding no
|
|
AllowStreamLocalForwarding no
|
|
AuthenticationMethods publickey
|
|
AllowUsers djm
|
|
'';
|
|
};
|
|
services.sshguard.enable = true;
|
|
services.oidentd.enable = true;
|
|
|
|
services.locate = {
|
|
enable = true;
|
|
package = pkgs.plocate;
|
|
localuser = null;
|
|
};
|
|
|
|
users.users.djm =
|
|
{ isNormalUser = true;
|
|
home = "/home/djm";
|
|
description = "David Morgan";
|
|
extraGroups = [ "wheel" "plocate" ];
|
|
shell = pkgs.zsh;
|
|
openssh.authorizedKeys.keys = [
|
|
"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCurCpxZCHtByB5wXzsjTXwMyDSB4+B8rq5XY6EGss58NwD8jc5cII4i+QUbCOGTiAggSZUSC9YIP24hjpOeNT/IYs5m7Qn1B9MtBAiUSrIYew8eDwnMLlPzN+k2x9zCrJeCHIvGJaFHPXTh1Lf5Jt2fPVGW9lksE/XUVOe6ht4N/b+nqqszXFhc8Ug6le2bC1YeTCVEf8pjlh/I7DkDBl6IB8uEXc3X2vxxbV0Z4vlBrFkkAywcD3j5VlS/QYfBr4BICNmq/sO3fMkbMbtAPwuFxeL4+h6426AARQZiSS0qVEc8OoFRBVx3GEH5fqVAWfB1geyLzei22HbjUcT9+xN davidmo@gendros"
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK9UDTaVnUOU/JknrNdihlhhGOk53LmHq9I1ASri3aga djm@gaius"
|
|
];
|
|
};
|
|
|
|
security.sudo.extraConfig = ''
|
|
djm ALL=(ALL) NOPASSWD: ALL
|
|
'';
|
|
security.doas = {
|
|
enable = true;
|
|
extraRules = [ { users = [ "djm" ]; noPass = true; keepEnv = true; } ];
|
|
};
|
|
|
|
programs.zsh.enable = true;
|
|
|
|
programs.vim.defaultEditor = true;
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
#procmail
|
|
vim
|
|
wget
|
|
];
|
|
|
|
nix.settings.trusted-users = [ "root" "djm" ];
|
|
|
|
i18n.defaultLocale = "en_GB.UTF-8";
|
|
|
|
system.stateVersion = "22.05";
|
|
}
|