tasiaiso/nixos-config
1
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

some stuff

Browse source
This commit is contained in:
Tasia Iso 2025-02-02 22:06:12 +01:00
parent 2b60fa5807
commit 05f0a5ab1c
Signed by: tasiaiso
SSH key fingerprint: SHA256:KiRjUay5C9i6objsEOIycygBHn54pDBB3Lj7fyJ0Elw
1 changed files with 21 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

25
hosts/jo/configuration.nix
View file

@ -42,7 +42,7 @@ in {
# ../../common/services/autoupgrade.nix # ../../common/services/autoupgrade.nix
# Home-manager # Home-manager
# ../../home/tasia/home.nix ../../home/tasia/home.nix
inputs.agenix.nixosModules.default inputs.agenix.nixosModules.default
../../common/components/wifi-secrets.nix ../../common/components/wifi-secrets.nix
@ -76,16 +76,33 @@ in {
services.tailscale.enable = true; services.tailscale.enable = true;
services.syncthing.guiAddress = "0.0.0.0:8384"; services.syncthing.guiAddress = "0.0.0.0:8384";
# TODO ????
boot.initrd.luks.devices."luks-7aa6742e-020d-49aa-a458-78ea5c3b85f8".keyFile = "/crypto_keyfile.bin"; boot.initrd.luks.devices."luks-7aa6742e-020d-49aa-a458-78ea5c3b85f8".keyFile = "/crypto_keyfile.bin";
networking.hostName = "jo"; # Define your hostname.
# networking.wireless.enable = true; # Enables wireless support via wpa_supplicant. # networking.wireless.enable = true; # Enables wireless support via wpa_supplicant.
# Configure network proxy if necessary # Configure network proxy if necessary
# networking.proxy.default = "http://user:password@proxy:port/"; # networking.proxy.default = "http://user:password@proxy:port/";
# networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain"; # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
# Enable networking networking = {
networking.networkmanager.enable = true; hostName = "jo";
firewall = {
allowedTCPPorts = [
22
# 8080 # ?
# 3001
# 443
# 8000
# 8008 # ssb
# 12345 # tildefriends
# 13378 # audiobookshelf
];
allowedUDPPorts = [
# 8080 # ?
];
};
};
users.users.tasia.openssh.authorizedKeys.keys = [ users.users.tasia.openssh.authorizedKeys.keys = [
sshKeys.tasia.cave sshKeys.tasia.cave