oizys/hosts/algiz/system.nix

43 lines
893 B
Nix
Raw Normal View History

2024-03-21 11:04:01 -05:00
{lib, ...}: let
inherit (lib) enabled;
in {
2024-02-27 10:27:41 -06:00
users.motd = lib.mkRune {
2024-01-28 23:31:00 -06:00
number = "6";
rune = "algiz";
};
2024-01-23 11:51:13 -06:00
2024-03-21 11:04:01 -05:00
services.resolved = enabled;
2024-01-23 11:51:13 -06:00
services.fail2ban = {
enable = true;
maxretry = 5;
bantime = "24h";
};
time.timeZone = "America/Chicago";
networking.hostName = "algiz";
# # added to make using `pip install` work in docker build
# networking.nameservers = [ "8.8.8.8"];
# allow tcp connections for revsere proxy
2024-03-21 11:04:01 -05:00
networking.firewall =
enabled
// {
allowedTCPPorts = [80 443];
};
2024-01-23 11:51:13 -06:00
2024-03-21 11:04:01 -05:00
services.openssh =
enabled
// {settings.PasswordAuthentication = false;};
2024-01-23 11:51:13 -06:00
2024-03-19 07:37:20 -05:00
# users.mutableUsers = false;
2024-01-23 11:51:13 -06:00
# Use the GRUB 2 boot loader.
boot.loader.grub.enable = true;
2024-03-17 15:13:46 -05:00
boot.loader.grub.device = "/dev/sda"; # or "nodev" for efi only
2024-01-23 11:51:13 -06:00
2024-03-21 11:04:01 -05:00
# don't delete this you foo bar
2024-03-17 15:13:46 -05:00
system.stateVersion = "23.11"; # Did you read the comment?
2024-01-23 11:51:13 -06:00
}