Home manager
This commit is contained in:
@@ -1,27 +1,20 @@
|
||||
{ config, pkgs, ... }:
|
||||
|
||||
let
|
||||
settings = import ../settings.nix;
|
||||
in
|
||||
{
|
||||
# Hardened OpenSSH
|
||||
services.openssh = {
|
||||
enable = true;
|
||||
ports = [ 22 ];
|
||||
settings = {
|
||||
# Authentication
|
||||
PermitRootLogin = "no";
|
||||
PasswordAuthentication = false;
|
||||
KbdInteractiveAuthentication = false;
|
||||
PermitEmptyPasswords = false;
|
||||
|
||||
# Security hardening
|
||||
X11Forwarding = false;
|
||||
AllowTcpForwarding = false;
|
||||
AllowAgentForwarding = false;
|
||||
AllowStreamLocalForwarding = false;
|
||||
|
||||
# Session settings
|
||||
ClientAliveInterval = 300;
|
||||
ClientAliveCountMax = 2;
|
||||
MaxAuthTries = 3;
|
||||
@@ -30,13 +23,10 @@ in
|
||||
};
|
||||
};
|
||||
|
||||
# Tailscale
|
||||
services.tailscale.enable = true;
|
||||
|
||||
# Fwupd
|
||||
services.fwupd.enable = true;
|
||||
|
||||
# Sunshine
|
||||
services.sunshine = {
|
||||
enable = true;
|
||||
autoStart = true;
|
||||
@@ -60,9 +50,9 @@ in
|
||||
syncthing = {
|
||||
enable = true;
|
||||
group = "wheel";
|
||||
user = "${settings.username}";
|
||||
dataDir = "/home/${settings.username}/syncthing/data";
|
||||
configDir = "/home/${settings.username}/syncthing/conf";
|
||||
user = "atridad";
|
||||
dataDir = "/home/atridad/syncthing/data";
|
||||
configDir = "/home/atridad/syncthing/conf";
|
||||
};
|
||||
};
|
||||
|
||||
|
||||
Reference in New Issue
Block a user