summaryrefslogtreecommitdiff
path: root/modules/xnet/default.nix
diff options
context:
space:
mode:
Diffstat (limited to 'modules/xnet/default.nix')
-rw-r--r--modules/xnet/default.nix33
1 files changed, 25 insertions, 8 deletions
diff --git a/modules/xnet/default.nix b/modules/xnet/default.nix
index 32d7a12..96e9b25 100644
--- a/modules/xnet/default.nix
+++ b/modules/xnet/default.nix
@@ -1,4 +1,11 @@
-{ pkgs, lib, config, flake, inputs, ... }:
+{
+ pkgs,
+ lib,
+ config,
+ flake,
+ inputs,
+ ...
+}:
let
inherit (builtins)
fetchurl
@@ -24,7 +31,7 @@ in
./disk.nix
./nginx.nix
./persist.nix
- ./net
+ # ./net
./gitserver
# ./monitoring
];
@@ -44,7 +51,11 @@ in
nixPath = mkForce [ "nixpkgs=${inputs.nixpkgs}" ];
settings = {
auto-optimise-store = true;
- experimental-features = [ "nix-command" "flakes" "pipe-operators" ];
+ experimental-features = [
+ "nix-command"
+ "flakes"
+ "pipe-operators"
+ ];
warn-dirty = false;
# timeout fast from binary cache
@@ -69,7 +80,7 @@ in
users.mutableUsers = false;
users.users.root = {
openssh.authorizedKeys.keys = config.xnet.pubKeys;
- initialPassword = "hello";
+ initialPassword = mkDefault "";
};
security.sudo = {
@@ -79,12 +90,18 @@ in
nixpkgs.config.allowUnfree = true;
+ services.gnome.gcr-ssh-agent.enable = false;
programs.ssh = {
+ startAgent = true;
knownHosts = {
- "github.com".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMqqnkVzrm0SdG6UOoqKLsabgH5C9okWi0dh2l9GKJl";
- "gitlab.com".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAfuCHKVTjquxvt6CM6tdG4SLp1Btn/nOeHHE5UOzRdf";
- "git.sr.ht".publicKey = " ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMZvRd4EtM7R+IHVMWmDkVU3VLQTSwQDSAvW0t2Tkj60";
- "pascal.ee.ryerson.ca".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFmWInQNT6EoU1NtUYzTs5jtpfbO/m6yvCckOiEGjvDc";
+ "github.com".publicKey =
+ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMqqnkVzrm0SdG6UOoqKLsabgH5C9okWi0dh2l9GKJl";
+ "gitlab.com".publicKey =
+ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAfuCHKVTjquxvt6CM6tdG4SLp1Btn/nOeHHE5UOzRdf";
+ "git.sr.ht".publicKey =
+ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMZvRd4EtM7R+IHVMWmDkVU3VLQTSwQDSAvW0t2Tkj60";
+ "pascal.ee.ryerson.ca".publicKey =
+ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFmWInQNT6EoU1NtUYzTs5jtpfbO/m6yvCckOiEGjvDc";
};
extraConfig = ''
Host github