adriangl/nix-dotfiles-v2
1
1
Fork 0
Code Issues Pull Requests Releases Activity

aragon

Browse Source
This commit is contained in:
Your Name
2025-10-01 20:15:26 +00:00
parent 1667016ad9
commit be2ddb472e
2 changed files with 27 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
hosts/aragon/configuration.nix
View File

@@ -12,6 +12,7 @@
../../modules/displaymanager.nix
../../modules/polkit.nix
../../modules/nix.nix
../../modules/openssh.nix
../../secrets/sops.nix
../../secrets/sopsconf.nix
../../modules/sound.nix
@@ -22,7 +23,6 @@
../../modules/steam.nix
../../modules/xdg.nix
../../modules/bluetooth.nix
../../modules/powerprofiles.nix
../../modules/basePackages.nix
../../modules/develPackages.nix
../../modules/desktopApplications.nix
@@ -47,7 +47,7 @@
boot.initrd.luks.devices."luks-08650b6b-6143-4503-8bf5-a3d32ef62d73".keyFile = "/crypto_keyfile.bin";
networking.hostName = "aragon"; # Define your hostname.
time.timeZone = "Europe/Amsterdam";
networking.networkmanager.enable = true;
# Enable the X11 windowing system.

25
modules/openssh.nix Normal file
View File

@@ -0,0 +1,25 @@
{ config, pkgs, lib, ... }:
{
services.openssh = {
enable = true;
settings.UseDns = true;
settings.PermitRootLogin = "prohibit-password";
startWhenNeeded = true;
ports = [ 6969 ];
openFirewall = true;
#settings.Ciphers = [
# "chacha20-poly1305@openssh.com"
# "aes256-gcm@openssh.com"
# "aes128-gcm@openssh.com"
# "aes256-ctr"
# # remove some weaker ciphers
#];
};
services.endlessh-go = {
enable = true;
port = 22;
openFirewall = true;
};
services.sshguard.enable = true; #protection against brute force attacks
}