helm/hosts/profiles/server/default.nix

23 lines
517 B
Nix
Raw Normal View History

2022-09-18 15:13:50 -07:00
{ config, ... }:
{
services.openssh = {
enable = true;
2023-08-12 18:57:16 -07:00
settings.PasswordAuthentication = false;
settings.PermitRootLogin = "no";
2022-09-18 15:13:50 -07:00
};
2022-09-23 01:11:14 -07:00
networking.firewall.allowedTCPPorts = [ 80 443 22 ]; # ssh and website
2022-09-18 15:13:50 -07:00
security.sudo.wheelNeedsPassword = false; # needed for deploy-rs
2022-09-20 08:32:09 -07:00
security.acme.defaults.email = "anish+acme@lakhwara.com";
security.acme.acceptTerms = true;
2022-10-03 06:59:21 -07:00
services.fail2ban = {
enable = true;
maxretry = 5;
ignoreIP = [
"127.0.0.0/8"
"10.0.0.0/8"
];
};
2022-09-18 15:13:50 -07:00
}