steveej/infra
1
0
Fork 0
Code Issues 2 Pull requests Projects Releases Packages Wiki Activity Actions

feat: flakify, gnome3

Browse source 
chore: nix fmt
refactor: split out more home-manager programs
feat: migrate shell as flake devShell
feat: initial flake structure with colmena
feat: migrate elias-e525 to colmena
feat: migrate steveej-t14 with colmena
feat: configure chromium extensions
chore: remove all overlays and package overrides
chore: delete some of _archive
feat: migrate vmd102066
feat: migrate sj-vps-htz0
This commit is contained in:
steveej 2023-04-15 12:21:22 +02:00
parent 4fcddef112
commit 33e0c3f4c6
79 changed files with 1797 additions and 1578 deletions
Download patch file Download diff file Expand all files Collapse all files

31
nix/os/devices/vmd102066.contaboserver.net/system.nix
View file

@ -2,15 +2,12 @@
pkgs,
lib,
config,
nodeName,
...
}: let
keys = import ../../../variables/keys.nix;
passwords = import ../../../variables/passwords.crypt.nix;
in {
# TASK: new device
networking.hostName = "vmd102066"; # Define your hostname.
networking.domain = "contaboserver.net";
networking.firewall.enable = true;
networking.firewall.allowedTCPPorts = [
# iperf3
@ -62,19 +59,19 @@ in {
'';
};
systemd.services.sshd.serviceConfig = {TasksMax = 32;};
# systemd.services.sshd.serviceConfig = {TasksMax = 32;};
systemd.timers."sshd-status" = {
description = "Timer to trigger sshd-status periodically";
enable = true;
wantedBy = ["timer.target" "multi-user.target"];
timerConfig = {
OnActiveSec = "5s";
OnUnitActiveSec = "5s";
AccuracySec = "1s";
Unit = "sshd-status.service";
};
};
# systemd.timers."sshd-status" = {
# description = "Timer to trigger sshd-status periodically";
# enable = true;
# wantedBy = ["timer.target" "multi-user.target"];
# timerConfig = {
# OnActiveSec = "5s";
# OnUnitActiveSec = "5s";
# AccuracySec = "1s";
# Unit = "sshd-status.service";
# };
# };
nix.gc = {automatic = true;};
@ -100,8 +97,6 @@ in {
done
'';
# networking.useHostResolvConf = true;
containers = {
backup = import ../../containers/backup.nix {
autoStart = false;