albert/nix
albert/nix
1
0
Fork 0
Code Issues Pull requests Activity Actions

updates

Browse source
This commit is contained in:
albert 2024-08-05 11:46:09 +09:00
parent dc62471715
commit f205b6010e
Signed by: albert
GPG key ID: 3895DD267CA11BA9
2 changed files with 7 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
README.md
View file

@ -53,6 +53,7 @@ nix develop -c /etc/nixos/git/docs/setup.sh
* Always after reboot * Always after reboot
* [ ] KDE not saving HDR / high frame rate settings on Wayland * [ ] KDE not saving HDR / high frame rate settings on Wayland
* [ ] Figure out a way to pass through GPG AND SSH authentications via SSH (so I can use my YubiKey on my server remotely) * [ ] Figure out a way to pass through GPG AND SSH authentications via SSH (so I can use my YubiKey on my server remotely)
* [ ] High I/O write causing issues on framework-server - Figure out where this is coming from. Seems random
## home-manager ## home-manager
* [ ] KDE: * [ ] KDE:
@ -65,7 +66,10 @@ nix develop -c /etc/nixos/git/docs/setup.sh
## Homelab General ## Homelab General
* [ ] Upgrades: * [ ] Upgrades:
* [ ] Headscale 0.23 - Need to update the web ui * [ ] Headscale 0.23 - Need to update the web ui
* [ ] New Features:
* [ ] Add fail2ban to Traefik
* Check other open ports
Completed To Do List [here](./docs/complete.md) Completed To Do List [here](./docs/complete.md)

2
nixos/hosts/framework-server/default.nix
View file

@ -34,6 +34,8 @@
''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBGXiWUR2T5HXQ4g/En+eJ9K6GSokl3tEK7RZcYb+0UA root@frankfurt-linode-01'' ''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBGXiWUR2T5HXQ4g/En+eJ9K6GSokl3tEK7RZcYb+0UA root@frankfurt-linode-01''
''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIcGPkzFaSGd1q/oy/uP5zEoOuPNr1h17ifu7oj4DaYO root@warsaw-ovh-01'' ''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIcGPkzFaSGd1q/oy/uP5zEoOuPNr1h17ifu7oj4DaYO root@warsaw-ovh-01''
]; ];
# Allow root login, but only with SSH keys
services.openssh.settings.PermitRootLogin = lib.mkForce "prohibit-password"; services.openssh.settings.PermitRootLogin = lib.mkForce "prohibit-password";
boot.initrd.availableKernelModules = [ "xhci_pci" "nvme" "thunderbolt" "sd_mod" "uas" ]; boot.initrd.availableKernelModules = [ "xhci_pci" "nvme" "thunderbolt" "sd_mod" "uas" ];