| Commit message (Collapse) | Author | Age |
|
|
|
| |
I just think this is easier to read.
|
|
|
|
|
| |
This is something that just makes the file system easier to traverse, but
isn't really necessary.
|
|
|
|
|
|
| |
As outlined in commit 19f0808, placing a password hash in the world
readable nix-store is perfectly safe as long as the hashing function is
not reversible, which should be a necessity for a password hash.
|
|
|
|
|
| |
All users are in the wheel group, thus direct login as root is no longer
needed.
|
| |
|
|
|
|
|
|
| |
This is inherently unsafe because it requires an unencrypted handshake.
Considering that all protocols also work directly with TLS i.e., the
encrypted variant, disabling this shouldn't be a drawback.
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
| |
This provides an html file located at /srv/www/vhack.eu/index.html over
https.
|
|\
| |
| |
| | |
Reviewed-on: https://git.sils.li/vhack.eu/nixos-server/pulls/16
|
| |\ |
|
| |/
|/|
| |
| |
| | |
Someone put a string, where a list of strings belonged. I took the
freedom to change that.
|
|/| |
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
We used the domain name instead of the host name, which obviously
doesn't work for multiple host. In addition to that I changed some
directory to make importing easier and enabled the "nix-command" and
"flakes" experimental options, to make the `nix flake check` command
usable.
Refs: #15
|
| |
| |
| |
| | |
Nix flakes make a lot of things very easy.
|
|\|
| |
| |
| |
| |
| |
| | |
server1_headless into server1
Reviewed-on: https://git.sils.li/vhack.eu/nixos-server/pulls/13
Reviewed-by: sils <sils@sils.li>
|
|/
|
|
|
| |
We run a headless server, so some things, like emergency boot mode, don't really make sense. This
import disables these.
|
|\
| |
| |
| |
| | |
Reviewed-on: https://git.sils.li/vhack.eu/nixos-server/pulls/12
Reviewed-by: sils <sils@sils.li>
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| |
| | |
Saving hashed passwords should be relatively safe, as long as the hashing
algorithm isn't flawed. Considering, that we use yescrypt with higher
than average parameters ('jFT' instead of 'j9T'), we should be safe for
now.
|
| | |
|
| |\
| |/
|/| |
|
|\ \
| | |
| | |
| | |
| | |
| | |
| | | |
persistent' (#9) from server1_ssh into server1
Reviewed-on: https://git.sils.li/vhack.eu/nixos-server/pulls/9
Reviewed-by: sils <sils@sils.li>
|
| | |
| | |
| | |
| | | |
This reverts commit 5a137ce8b8f4b1dcfee03d001938c0fa25df842f.
|
| |\ \
| |/ /
|/| | |
|
| | |
| | |
| | |
| | | |
resolve conflicts with target branch
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
I changed the valid ssh-host-keys from both rsa and ed25519 to
only ed25519 and moved them to `/srv/ssh` to make them persistent.
In addition to that, I also increased the rounds for the ed25519 key to
1000.
This fixes the ssh-host-key issue introduced by pull request #5.
Fixes: #5
|
| | |\
| |_|/
|/| | |
|
|\ \ \
| |/ /
|/| |
| | |
| | | |
Reviewed-on: https://git.sils.li/vhack.eu/nixos-server/pulls/11
Reviewed-by: sils <sils@sils.li>
|
| |\ \
| |/ /
|/| | |
|
| | |
| | |
| | |
| | |
| | | |
The names of the settings in the GitHub repository are outdated, this
commit changes the setting name to the real ones.
|
| | |
| | |
| | |
| | | |
This module generates a TOML config from a nix set.
|
| | | |
|
| | |
| | |
| | |
| | | |
I'm not sure if this is really helpful
|
| |/
|/|
| |
| |
| |
| |
| | |
The passwords will be stored in a specific password file, which because it
isn't part of this repository is secure.
Refs: #9
|
|\ \
| |/
|/|
| |
| |
| |
| | |
server1_boot into server1
Reviewed-on: https://git.sils.li/vhack.eu/nixos-server/pulls/10
Reviewed-by: sils <sils@sils.li>
|
|/
|
|
| |
Co-authored-by: sils <sils@sils.li>
|
|\
| |
| |
| |
| |
| |
| | |
server1_minecraft into server1
Reviewed-on: https://git.sils.li/vhack.eu/nixos-server/pulls/8
Reviewed-by: ene <ene@sils.li>
|
| |\
| | |
| | |
| | | |
https://git.sils.li/vhack.eu/nixos-server into server1_minecraft
|
| |/
|/| |
|
|\ \
| | |
| | |
| | |
| | |
| | |
| | | |
server1_minecraft into server1
Reviewed-on: https://git.sils.li/vhack.eu/nixos-server/pulls/7
Reviewed-by: ene <ene@sils.li>
|
| |\ \
| |/ /
|/| | |
|
|\ \ \
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
server1_minecraft into server1
Reviewed-on: https://git.sils.li/vhack.eu/nixos-server/pulls/6
Reviewed-by: ene <ene@sils.li>
|
| | | | |
|