fw/nix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Lots of changes

Browse source
This commit is contained in:
fwastring 2025-05-28 16:44:19 +02:00
parent 83389842f6
commit 31f154497d
4 changed files with 47 additions and 73 deletions
Download patch file Download diff file Expand all files Collapse all files

69
maskiner/macmini/configuration.nix
View file

@ -7,42 +7,55 @@
pkgs,
myhostname,
...
}: {
}:
{
# You can import other NixOS modules here
imports = [
./hardware-configuration.nix
../../config/users.nix
../../config/users.nix
];
environment.systemPackages = with pkgs; [
unstable.lego
];
networking.firewall = {
enable = true;
allowedTCPPorts = [ 80 443 3000 8384 22000];
allowedUDPPortRanges = [
{ from = 4000; to = 4007; }
{ from = 8000; to = 8010; }
environment.systemPackages = with pkgs; [
unstable.lego
];
};
networking.firewall = {
enable = true;
allowedTCPPorts = [
80
443
3000
8384
8008
8009
22000
];
allowedUDPPortRanges = [
{
from = 1;
to = 65535;
}
];
};
networking.firewall.allowedUDPPorts = [ 22000 21027 ];
services = {
openssh = {
enable = true;
ports = [22];
settings = {
PermitRootLogin = "no";
PasswordAuthentication = false;
X11Forwarding = true;
};
extraConfig = ''
AllowUsers fw
'';
};
};
networking.firewall.allowedUDPPorts = [
22000
21027
];
services = {
openssh = {
enable = true;
ports = [ 22 ];
settings = {
PermitRootLogin = "no";
PasswordAuthentication = false;
X11Forwarding = true;
};
extraConfig = ''
AllowUsers fw
'';
};
};
security.rtkit.enable = true;
networking.hostName = myhostname;