Personal Nix setup
Review git/ssh/tangled config
+32
-2
+9
-2
modules/server/sshd.nix
+9
-2
modules/server/sshd.nix
···
18
18
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGgNlwxQFRcZjnOyoNQ9HDkhGrESU8J5fwd0HeF6CiYg"
19
19
];
20
20
21
+
systemd.services.sshd.serviceConfig = helpers.linuxAttrs {
22
+
MemoryMax = "8G";
23
+
MemoryHigh = "6G";
24
+
CPUWeight = 80;
25
+
TasksMax = 256;
26
+
};
27
+
21
28
services.openssh = {
22
29
enable = true;
23
30
} // helpers.linuxAttrs {
···
29
36
KbdInteractiveAuthentication = false;
30
37
MaxAuthTries = 3;
31
38
LoginGraceTime = 30;
32
-
MaxSessions = 3;
33
-
MaxStartups = "3:50:10";
39
+
MaxSessions = 5;
40
+
MaxStartups = "10:30:60";
34
41
ClientAliveInterval = 60;
35
42
ClientAliveCountMax = 3;
36
43
AllowAgentForwarding = false;
+23
modules/server/tangled.nix
+23
modules/server/tangled.nix
···
44
44
denyDeleteCurrent = true;
45
45
fsckObjects = true;
46
46
autogc = true;
47
+
maxInputSize = "500m";
47
48
};
49
+
protocol.version = 2;
48
50
uploadpack = {
49
51
allowFilter = true;
50
52
allowReachableSHA1InWant = true;
53
+
keepAlive = 5;
54
+
};
55
+
core = {
56
+
bigFileThreshold = "50m";
57
+
commitGraph = true;
58
+
multiPackIndex = true;
59
+
packedGitLimit = "256m";
60
+
packedGitWindowSize = "1m";
61
+
deltaBaseCacheLimit = "96m";
51
62
};
52
63
pack = {
53
64
threads = 0;
54
65
windowMemory = "256m";
66
+
window = 25;
67
+
};
68
+
gc = {
69
+
bigPackThreshold = "512m";
70
+
writeCommitGraph = true;
55
71
};
56
72
repack.writeBitmaps = true;
57
73
include.path = config.age.secrets."gitconfig.private".path;
58
74
};
75
+
};
76
+
77
+
systemd.services.knot.serviceConfig = {
78
+
MemoryMax = "8G";
79
+
MemoryHigh = "6G";
80
+
CPUWeight = 80;
81
+
TasksMax = 128;
59
82
};
60
83
61
84
age.secrets."gitconfig.private" = let