curnve does ssh now too
This commit is contained in:
		
							parent
							
								
									19125e33ad
								
							
						
					
					
						commit
						3c3236cd2d
					
				|  | @ -1,5 +1,4 @@ | ||||||
| { self, pkgs, ... }: | { self, pkgs, ... }: { | ||||||
| { |  | ||||||
|   imports = [ |   imports = [ | ||||||
|     ./configuration.nix |     ./configuration.nix | ||||||
|     ../users/anish |     ../users/anish | ||||||
|  | @ -17,19 +16,26 @@ | ||||||
|     # ../profiles/mount-mossnet |     # ../profiles/mount-mossnet | ||||||
|   ]; |   ]; | ||||||
| 
 | 
 | ||||||
|  |   # temporarily allow ssh access for work, to be able to do deploy new services | ||||||
|  |   services.openssh = { | ||||||
|  |     enable = true; | ||||||
|  |     settings.PasswordAuthentication = false; | ||||||
|  |     settings.PermitRootLogin = "no"; | ||||||
|  |   }; | ||||||
|  | 
 | ||||||
|   # import profiling tools |   # import profiling tools | ||||||
|   programs.systemtap.enable = true; |   programs.systemtap.enable = true; | ||||||
| 
 | 
 | ||||||
|   virtualisation.docker.enable = true; |   virtualisation.docker.enable = true; | ||||||
|   virtualisation.docker.storageDriver = "btrfs"; |   virtualisation.docker.storageDriver = "btrfs"; | ||||||
|   environment.systemPackages = with pkgs; [ |   environment.systemPackages = with pkgs; [ docker-compose ]; | ||||||
|     docker-compose   |  | ||||||
|   ]; |  | ||||||
| 
 | 
 | ||||||
|   # Speed up boot by removing dependency on network  |   # Speed up boot by removing dependency on network  | ||||||
|   systemd = { |   systemd = { | ||||||
|     targets.network-online.wantedBy = pkgs.lib.mkForce [ ]; # Normally ["multi-user.target"] |     targets.network-online.wantedBy = | ||||||
|     services.NetworkManager-wait-online.wantedBy = pkgs.lib.mkForce [ ]; # Normally ["network-online.target"] |       pkgs.lib.mkForce [ ]; # Normally ["multi-user.target"] | ||||||
|  |     services.NetworkManager-wait-online.wantedBy = | ||||||
|  |       pkgs.lib.mkForce [ ]; # Normally ["network-online.target"] | ||||||
|   }; |   }; | ||||||
| 
 | 
 | ||||||
|   programs.gnupg.agent.enable = true; |   programs.gnupg.agent.enable = true; | ||||||
|  | @ -64,8 +70,15 @@ | ||||||
| 
 | 
 | ||||||
|   # lazy enable of ports necessary for KDE connect which is installed via cli home profile (for some reason?) |   # lazy enable of ports necessary for KDE connect which is installed via cli home profile (for some reason?) | ||||||
|   networking.firewall = { |   networking.firewall = { | ||||||
|     allowedTCPPortRanges = [{ from = 1714; to = 1764; }]; |     allowedTCPPorts = [ 22 ]; # allow ssh | ||||||
|     allowedUDPPortRanges = [{ from = 1714; to = 1764; }]; |     allowedTCPPortRanges = [{ | ||||||
|  |       from = 1714; | ||||||
|  |       to = 1764; | ||||||
|  |     }]; | ||||||
|  |     allowedUDPPortRanges = [{ | ||||||
|  |       from = 1714; | ||||||
|  |       to = 1764; | ||||||
|  |     }]; | ||||||
|   }; |   }; | ||||||
| 
 | 
 | ||||||
|   age.secrets.curve-wg.file = "${self}/secrets/curve-wg.age"; |   age.secrets.curve-wg.file = "${self}/secrets/curve-wg.age"; | ||||||
|  | @ -81,10 +94,7 @@ | ||||||
|   mossnet.backup = { |   mossnet.backup = { | ||||||
|     enable = true; |     enable = true; | ||||||
|     name = "curve"; |     name = "curve"; | ||||||
|     paths = [ |     paths = [ "/home/anish/usr" "/home/anish/.ssh" ]; | ||||||
|       "/home/anish/usr" |  | ||||||
|       "/home/anish/.ssh" |  | ||||||
|     ]; |  | ||||||
|   }; |   }; | ||||||
| 
 | 
 | ||||||
|   # enable adb  |   # enable adb  | ||||||
|  | @ -93,7 +103,8 @@ | ||||||
|   #virtualisation.docker.enable = true; |   #virtualisation.docker.enable = true; | ||||||
|   boot.blacklistedKernelModules = [ "qcserial" ]; |   boot.blacklistedKernelModules = [ "qcserial" ]; | ||||||
|   # Used for packer Capsul |   # Used for packer Capsul | ||||||
|   users.users.anish.extraGroups = [ "adbusers" "wheel" "plugdev" "libvertd" "docker" ]; |   users.users.anish.extraGroups = | ||||||
|  |     [ "adbusers" "wheel" "plugdev" "libvertd" "docker" ]; | ||||||
|   virtualisation.libvirtd.enable = true; |   virtualisation.libvirtd.enable = true; | ||||||
|   hardware.keyboard.zsa.enable = true; |   hardware.keyboard.zsa.enable = true; | ||||||
|   services.udev.extraRules = '' |   services.udev.extraRules = '' | ||||||
|  |  | ||||||
|  | @ -4,17 +4,20 @@ | ||||||
|   programs.zsh.enable = true; |   programs.zsh.enable = true; | ||||||
|   users.users.anish = { |   users.users.anish = { | ||||||
|     description = "Personal user for Anish"; |     description = "Personal user for Anish"; | ||||||
|     hashedPassword = "$y$j9T$y3DPt/dWaPE.gRazQqw1w0$1RMH5sl/Nu8kW3ZMywYCPRniHD/jF5qRh0VKrdJ.bV2"; |     hashedPassword = | ||||||
|  |       "$y$j9T$y3DPt/dWaPE.gRazQqw1w0$1RMH5sl/Nu8kW3ZMywYCPRniHD/jF5qRh0VKrdJ.bV2"; | ||||||
|     shell = pkgs.zsh; |     shell = pkgs.zsh; | ||||||
|     isNormalUser = true; |     isNormalUser = true; | ||||||
|     extraGroups = [ "wheel" "audio" "networkmanager" "video" ]; |     extraGroups = [ "wheel" "audio" "networkmanager" "video" ]; | ||||||
|     openssh.authorizedKeys.keys = [ |     openssh.authorizedKeys.keys = [ | ||||||
|       # Curve |       # Curve | ||||||
|       "ssh-rsa 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 anish@curve" |       "ssh-rsa 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 anish@curve" | ||||||
|       # Line |  | ||||||
|       "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDtU2GMYjXj6RGO1+mwM4TDGOo0qrKLTL4Di8+QgDX0p5vUEsnE1PS9wnuqCmSu75U8g0XIAMtvtdYyGk1N+Bx01erAZpT8DLYtIXFCyaiN28PVu5T1D0T+TQ7xgIH1qenXZR2DOQdf6kpvKEfm7+7bWhCo0N/KFMpmReubyzHDQcq/1qQasxTL+YALQFOjwKqsOTBXbHwZ103AEAcQX4ftBFEOfVli4/1aKIK4dNSZYB7J9Htq707YnsEqo9RLAMh0aOTTYgTx9AoSUDeqGuh/AGkcB7NcS7EEtI6d5YUGylwZh/gF6hqE0jl8kn2m5jMKXL3CRohZvjifue8x/GIjpu5WRabUuhBEbrfTQQaC7taHnt5rvYCGzKZx09TexUzhuz2CL480DRoxSG+P+lCNm1dIg/EZrnGEzXCSr36PlOqS5t5gm8tPkzCmZf2wU15A3ZIYUPmnYLqsn4WmIV7rKmdqt2ctWELUXow3PPiZXBucP9P3xpsYEfF1SB2SGNc= u0_a139@localhost" |  | ||||||
|       # Box |       # Box | ||||||
|       "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKN8/SH55DBiwVoSnTU8k2Pen+wmovL9QaMyehxGEsJJv/8fzwsswGalD4C/4O51LOvdu4UKkZW5hG02uVSK+58p3UV3pOPyoqsu/aDeIsWsqmTeTzUrBIWOlNzcDKnohLz2oGC5YO+wyTJ9Iteq6aGJDjErsW7sG3h5lXCs551EmJNNGhtBQaaoytMNnWqSdlVjDNCijurH7WUpp40U/RjEp532l4rX6eIIj3jBKEFbhZkFSSjqbj4xM4SyFt+Jmigb1RMjsQjmpfY1vDtM84RcYfpTUte/T5w2dkD5H6kccmWnwKSJpm9wXfx4E7lR9APdUGnau2U1+XxiD3ytGl anish@box" |       "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKN8/SH55DBiwVoSnTU8k2Pen+wmovL9QaMyehxGEsJJv/8fzwsswGalD4C/4O51LOvdu4UKkZW5hG02uVSK+58p3UV3pOPyoqsu/aDeIsWsqmTeTzUrBIWOlNzcDKnohLz2oGC5YO+wyTJ9Iteq6aGJDjErsW7sG3h5lXCs551EmJNNGhtBQaaoytMNnWqSdlVjDNCijurH7WUpp40U/RjEp532l4rX6eIIj3jBKEFbhZkFSSjqbj4xM4SyFt+Jmigb1RMjsQjmpfY1vDtM84RcYfpTUte/T5w2dkD5H6kccmWnwKSJpm9wXfx4E7lR9APdUGnau2U1+XxiD3ytGl anish@box" | ||||||
|  |       # Nix-on-droid line | ||||||
|  |       "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJOiXBPVvZAp1fY0a0Tupxj0Ml6MoA51lvqt/jAQq249 nix-on-droid@localhost" | ||||||
|  |       # Work | ||||||
|  |       "ssh-rsa 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 anishlakhwara@anishs-mbp.lan" | ||||||
|     ]; |     ]; | ||||||
|   }; |   }; | ||||||
| } | } | ||||||
|  |  | ||||||
		Loading…
	
		Reference in a new issue