diff options
| author | Kleidi Bujari <mail@4kb.net> | 2026-04-15 21:50:00 -0700 |
|---|---|---|
| committer | Kleidi Bujari <mail@4kb.net> | 2026-04-15 21:50:00 -0700 |
| commit | 1fb95c5d808db3c531e4c8ee642315c9b93725e9 (patch) | |
| tree | 46125188b33266a4f5d8cf248d475afb540b6fd6 /modules/xnet | |
| parent | 3677d7ee55f1bbda4ca57300311c621bb4a8b9ff (diff) | |
| download | depot-1fb95c5d808db3c531e4c8ee642315c9b93725e9.tar.gz depot-1fb95c5d808db3c531e4c8ee642315c9b93725e9.tar.bz2 depot-1fb95c5d808db3c531e4c8ee642315c9b93725e9.zip | |
less strict initial password for root and start ssh agent by default
Diffstat (limited to 'modules/xnet')
| -rw-r--r-- | modules/xnet/default.nix | 33 |
1 files changed, 25 insertions, 8 deletions
diff --git a/modules/xnet/default.nix b/modules/xnet/default.nix index 32d7a12..96e9b25 100644 --- a/modules/xnet/default.nix +++ b/modules/xnet/default.nix @@ -1,4 +1,11 @@ -{ pkgs, lib, config, flake, inputs, ... }: +{ + pkgs, + lib, + config, + flake, + inputs, + ... +}: let inherit (builtins) fetchurl @@ -24,7 +31,7 @@ in ./disk.nix ./nginx.nix ./persist.nix - ./net + # ./net ./gitserver # ./monitoring ]; @@ -44,7 +51,11 @@ in nixPath = mkForce [ "nixpkgs=${inputs.nixpkgs}" ]; settings = { auto-optimise-store = true; - experimental-features = [ "nix-command" "flakes" "pipe-operators" ]; + experimental-features = [ + "nix-command" + "flakes" + "pipe-operators" + ]; warn-dirty = false; # timeout fast from binary cache @@ -69,7 +80,7 @@ in users.mutableUsers = false; users.users.root = { openssh.authorizedKeys.keys = config.xnet.pubKeys; - initialPassword = "hello"; + initialPassword = mkDefault ""; }; security.sudo = { @@ -79,12 +90,18 @@ in nixpkgs.config.allowUnfree = true; + services.gnome.gcr-ssh-agent.enable = false; programs.ssh = { + startAgent = true; knownHosts = { - "github.com".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMqqnkVzrm0SdG6UOoqKLsabgH5C9okWi0dh2l9GKJl"; - "gitlab.com".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAfuCHKVTjquxvt6CM6tdG4SLp1Btn/nOeHHE5UOzRdf"; - "git.sr.ht".publicKey = " ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMZvRd4EtM7R+IHVMWmDkVU3VLQTSwQDSAvW0t2Tkj60"; - "pascal.ee.ryerson.ca".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFmWInQNT6EoU1NtUYzTs5jtpfbO/m6yvCckOiEGjvDc"; + "github.com".publicKey = + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMqqnkVzrm0SdG6UOoqKLsabgH5C9okWi0dh2l9GKJl"; + "gitlab.com".publicKey = + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAfuCHKVTjquxvt6CM6tdG4SLp1Btn/nOeHHE5UOzRdf"; + "git.sr.ht".publicKey = + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMZvRd4EtM7R+IHVMWmDkVU3VLQTSwQDSAvW0t2Tkj60"; + "pascal.ee.ryerson.ca".publicKey = + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFmWInQNT6EoU1NtUYzTs5jtpfbO/m6yvCckOiEGjvDc"; }; extraConfig = '' Host github |