NixOS + home-manager configs, mirrored from GitLab SaaS. gitlab.com/andreijiroh-dev/nixops-config
nix-flake nixos home-manager nixpkgs nix-flakes
1
fork

Configure Feed

Select the types of activity you want to include in your feed.

Cook up configs and nixosModules exports for public consumption

Signed-off-by: Andrei Jiroh Halili <ajhalili2006@andreijiroh.dev>

+28 -2
+20
flake.nix
··· 95 95 }; 96 96 }; 97 97 }; 98 + nixosModules = { 99 + flatpak = ./shared/flatpak.nix; 100 + gnupg = ./shared/gnupg.nix; 101 + locale = ./shared/locale.nix; 102 + metaConfigs = ./shared/meta-configs.nix; 103 + networking = ./shared/networking.nix; 104 + sshKeys = ./shared/ssh-keys.nix; 105 + devenv = ./shared/server/devenv.nix; 106 + server = { 107 + devenv = ./shared/server/devenv.nix; 108 + firewall = ./shared/server/firewall.nix; 109 + ssh = ./shared/server/ssh.nix; 110 + tailscale = ./shared/server/tailscale.nix; 111 + }; 112 + desktop = { 113 + bluetooth = ./shared/desktop/bluetooth.nix; 114 + firewall = ./shared/desktop/firewall.nix; 115 + kdePlasma = ./shared/desktop/kde-plasma.nix; 116 + }; 117 + }; 98 118 }; 99 119 }
+2 -2
shared/server/devenv.nix
··· 14 14 daemon = { 15 15 settings = { 16 16 dns = [ 17 - 1.1.1.1 18 - 1.0.0.1 17 + "1.1.1.1" 18 + "1.0.0.1" 19 19 ]; 20 20 ipv6 = true; 21 21 };
+6
shared/server/ssh.nix
··· 7 7 services.openssh = { 8 8 enable = true; 9 9 settings = { 10 + # Disable password authentication over SSH and require SSH keys 10 11 PermitRootLogin = "prohibit-password"; 12 + PasswordAuthentication no 13 + 14 + # Allow port and X11 forwarding 15 + AllowTcpForwarding yes 16 + X11Forwarding yes 11 17 }; 12 18 }; 13 19