steveej/infra
1
0
Fork 0
Code Issues 2 Pull requests Projects Releases Packages Wiki Activity Actions

feat(nix,bm-hostkey0): relaxed sandbox, SSH RemoteForward support, add pass, holo cache

Browse source
This commit is contained in:
steveej 2024-05-16 15:42:15 +02:00
parent 54f94b8710
commit 407438d865
2 changed files with 13 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

10
nix/os/devices/sj-bm-hostkey0/configuration.nix
View file

@ -33,6 +33,9 @@ in {
../../profiles/common/user.nix
../../snippets/nix-settings.nix
../../snippets/nix-settings-holo-chain.nix
{
nix.settings.sandbox = lib.mkForce "relaxed";
}
../../snippets/holo-zerotier.nix
@ -49,6 +52,10 @@ in {
};
home-manager.users.steveej = {pkgs, ...}: {
imports = [
../../../home-manager/programs/pass.nix
];
home.packages = [
pkgs.nil
pkgs.rnix-lsp
@ -90,6 +97,9 @@ in {
services.openssh.enable = true;
services.openssh.settings.PermitRootLogin = "yes";
services.openssh.extraConfig = ''
StreamLocalBindUnlink yes
'';
boot = {
kernel = {