cst1/lab-infra
1
0
Fork 0
forked from DGNum/lab-infra
Code Pull requests Activity

fix(photo01): split services into modules

Browse source
This commit is contained in:
Constantin Gierczak--Galle 2024-11-21 18:44:54 +01:00
parent c2875a70f8
commit a81b8de9cc
No known key found for this signature in database
4 changed files with 36 additions and 27 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
machines/photo01/_configuration.nix
View file

@ -38,13 +38,6 @@ in
environment.systemPackages = with pkgs; [ neovim ]; environment.systemPackages = with pkgs; [ neovim ];
services.openssh = {
enable = true;
settings = {
PasswordAuthentication = false;
};
};
users.users.root.openssh.authorizedKeys.keys = [ users.users.root.openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDMBW7rTtfZL9wtrpCVgariKdpN60/VeAzXkh9w3MwbO julien@enigma" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDMBW7rTtfZL9wtrpCVgariKdpN60/VeAzXkh9w3MwbO julien@enigma"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKrijwPlb7KQkYPLznMPVzPPT69cLzhEsJzZi9tmxzTh cst1@x270" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKrijwPlb7KQkYPLznMPVzPPT69cLzhEsJzZi9tmxzTh cst1@x270"
@ -73,14 +66,6 @@ in
}; };
# TODO: switch to unixsockets if supported # TODO: switch to unixsockets if supported
services.nginx = {
enable = true;
recommendedTlsSettings = true;
recommendedOptimisation = true;
recommendedGzipSettings = true;
recommendedProxySettings = true;
clientMaxBodySize = "500m";
};
nix = { nix = {
settings = { settings = {

24
machines/photo01/_hardware-configuration.nix
View file

@ -4,18 +4,18 @@
imports = [ (modulesPath + "/profiles/qemu-guest.nix") ]; imports = [ (modulesPath + "/profiles/qemu-guest.nix") ];
boot = { boot = {
loader.systemd-boot.enable = true; loader.systemd-boot.enable = true;
initrd.kernelModules = [ ]; initrd.kernelModules = [ ];
kernelModules = [ ]; kernelModules = [ ];
extraModulePackages = [ ]; extraModulePackages = [ ];
initrd.availableKernelModules = [ initrd.availableKernelModules = [
"ata_piix" "ata_piix"
"uhci_hcd" "uhci_hcd"
"virtio_pci" "virtio_pci"
"virtio_scsi" "virtio_scsi"
"sd_mod" "sd_mod"
"sr_mod" "sr_mod"
]; ];
}; };

13
machines/photo01/nginx.nix Normal file
View file

@ -0,0 +1,13 @@
{ ... }:
{
services.nginx = {
enable = true;
recommendedTlsSettings = true;
recommendedOptimisation = true;
recommendedGzipSettings = true;
recommendedProxySettings = true;
clientMaxBodySize = "500m";
};
}

11
machines/photo01/openssh.nix Normal file
View file

@ -0,0 +1,11 @@
{ ... }:
{
services.openssh = {
enable = true;
settings = {
PasswordAuthentication = false;
};
};
}