Home manager

This commit is contained in:
2026-01-22 10:44:27 -07:00
parent da9d7b4bff
commit f918c336fe
11 changed files with 184 additions and 94 deletions

View File

@@ -1,27 +1,20 @@
{ config, pkgs, ... }:
let
settings = import ../settings.nix;
in
{
# Hardened OpenSSH
services.openssh = {
enable = true;
ports = [ 22 ];
settings = {
# Authentication
PermitRootLogin = "no";
PasswordAuthentication = false;
KbdInteractiveAuthentication = false;
PermitEmptyPasswords = false;
# Security hardening
X11Forwarding = false;
AllowTcpForwarding = false;
AllowAgentForwarding = false;
AllowStreamLocalForwarding = false;
# Session settings
ClientAliveInterval = 300;
ClientAliveCountMax = 2;
MaxAuthTries = 3;
@@ -30,13 +23,10 @@ in
};
};
# Tailscale
services.tailscale.enable = true;
# Fwupd
services.fwupd.enable = true;
# Sunshine
services.sunshine = {
enable = true;
autoStart = true;
@@ -60,9 +50,9 @@ in
syncthing = {
enable = true;
group = "wheel";
user = "${settings.username}";
dataDir = "/home/${settings.username}/syncthing/data";
configDir = "/home/${settings.username}/syncthing/conf";
user = "atridad";
dataDir = "/home/atridad/syncthing/data";
configDir = "/home/atridad/syncthing/conf";
};
};