35 lines
730 B
Nix
35 lines
730 B
Nix
{ enabled, ... }:
|
|
{
|
|
services.resolved = enabled;
|
|
|
|
services.fail2ban = {
|
|
enable = true;
|
|
maxretry = 5;
|
|
bantime = "24h";
|
|
};
|
|
|
|
# # added to make using `pip install` work in docker build
|
|
# networking.nameservers = [ "8.8.8.8"];
|
|
|
|
# allow tcp connections for revsere proxy
|
|
networking.firewall = enabled // {
|
|
allowedTCPPorts = [
|
|
80
|
|
443
|
|
];
|
|
};
|
|
|
|
services.openssh = enabled // {
|
|
settings.PasswordAuthentication = false;
|
|
};
|
|
|
|
# users.mutableUsers = false;
|
|
|
|
# Use the GRUB 2 boot loader.
|
|
boot.loader.grub.enable = true;
|
|
boot.loader.grub.device = "/dev/sda"; # or "nodev" for efi only
|
|
|
|
# don't delete this you foo bar
|
|
system.stateVersion = "23.11"; # Did you read the comment?
|
|
}
|