feat(photo01): init #4

Merged
cst1 merged 19 commits from cst1/lab-infra:init_photo01 into main 2024-11-22 14:04:37 +01:00
4 changed files with 36 additions and 27 deletions
Showing only changes of commit a81b8de9cc - Show all commits

View file

@ -38,13 +38,6 @@ in
environment.systemPackages = with pkgs; [ neovim ]; environment.systemPackages = with pkgs; [ neovim ];
services.openssh = {
enable = true;
settings = {
PasswordAuthentication = false;
};
};
users.users.root.openssh.authorizedKeys.keys = [ users.users.root.openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDMBW7rTtfZL9wtrpCVgariKdpN60/VeAzXkh9w3MwbO julien@enigma" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDMBW7rTtfZL9wtrpCVgariKdpN60/VeAzXkh9w3MwbO julien@enigma"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKrijwPlb7KQkYPLznMPVzPPT69cLzhEsJzZi9tmxzTh cst1@x270" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKrijwPlb7KQkYPLznMPVzPPT69cLzhEsJzZi9tmxzTh cst1@x270"
@ -73,14 +66,6 @@ in
}; };
# TODO: switch to unixsockets if supported # TODO: switch to unixsockets if supported
services.nginx = {
enable = true;
recommendedTlsSettings = true;
recommendedOptimisation = true;
recommendedGzipSettings = true;
recommendedProxySettings = true;
clientMaxBodySize = "500m";
};
nix = { nix = {
settings = { settings = {

View file

@ -4,18 +4,18 @@
imports = [ (modulesPath + "/profiles/qemu-guest.nix") ]; imports = [ (modulesPath + "/profiles/qemu-guest.nix") ];
boot = { boot = {
loader.systemd-boot.enable = true; loader.systemd-boot.enable = true;
initrd.kernelModules = [ ]; initrd.kernelModules = [ ];
kernelModules = [ ]; kernelModules = [ ];
extraModulePackages = [ ]; extraModulePackages = [ ];
initrd.availableKernelModules = [ initrd.availableKernelModules = [
"ata_piix" "ata_piix"
"uhci_hcd" "uhci_hcd"
"virtio_pci" "virtio_pci"
"virtio_scsi" "virtio_scsi"
"sd_mod" "sd_mod"
"sr_mod" "sr_mod"
]; ];
}; };

View file

@ -0,0 +1,13 @@
{ ... }:
{
services.nginx = {
enable = true;
recommendedTlsSettings = true;
recommendedOptimisation = true;
recommendedGzipSettings = true;
recommendedProxySettings = true;
clientMaxBodySize = "500m";
};
}

View file

@ -0,0 +1,11 @@
{ ... }:
{
services.openssh = {
enable = true;
settings = {
PasswordAuthentication = false;
};
};
}