56 lines
1.0 KiB
Nix
56 lines
1.0 KiB
Nix
{
|
|
config,
|
|
...
|
|
}:
|
|
{
|
|
imports = [
|
|
./hardware-configuration.nix
|
|
./secrets
|
|
./dyndns
|
|
];
|
|
|
|
kekleo.graphical = false;
|
|
kekleo.publicKeys = [
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOsLFjdS9JEcgBPa6NvOzpJp8coJPJwJFuM+PQCZ8brl leonhard"
|
|
];
|
|
|
|
users.users.leonhard = {
|
|
initialPassword = "leonhard";
|
|
isNormalUser = true;
|
|
extraGroups = [ "wheel" ];
|
|
openssh.authorizedKeys.keys = config.kekleo.publicKeys;
|
|
};
|
|
|
|
networking = {
|
|
hostName = "server";
|
|
firewall.enable = false;
|
|
interfaces.eno1 = {
|
|
ipv4.addresses = [
|
|
{
|
|
address = "192.168.178.210";
|
|
prefixLength = 24;
|
|
}
|
|
];
|
|
};
|
|
defaultGateway = {
|
|
address = "192.168.178.1";
|
|
interface = "eno1";
|
|
};
|
|
nameservers = [
|
|
"1.1.1.1"
|
|
"8.8.8.8"
|
|
];
|
|
};
|
|
|
|
services.openssh = {
|
|
enable = true;
|
|
ports = [ 5432 ];
|
|
settings = {
|
|
PasswordAuthentication = false;
|
|
KbdInteractiveAuthentication = false;
|
|
PermitRootLogin = "no";
|
|
AllowUsers = [ "leonhard" ];
|
|
};
|
|
};
|
|
}
|