{ enabled, ... }: { services.resolved = enabled; services.fail2ban = { enable = true; maxretry = 5; bantime = "24h"; }; time.timeZone = "America/Chicago"; networking.hostName = "algiz"; # # added to make using `pip install` work in docker build # networking.nameservers = [ "8.8.8.8"]; # allow tcp connections for revsere proxy networking.firewall = enabled // { allowedTCPPorts = [ 80 443 ]; }; services.openssh = enabled // { settings.PasswordAuthentication = false; }; # users.mutableUsers = false; # Use the GRUB 2 boot loader. boot.loader.grub.enable = true; boot.loader.grub.device = "/dev/sda"; # or "nodev" for efi only # don't delete this you foo bar system.stateVersion = "23.11"; # Did you read the comment? }