Kabbone/nixos-config
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Compare commits

base: Kabbone:ede4232f2853b7a4d269aabdef80052a70e2c815
Branches Tags
Kabbone:main
Kabbone:dev
Kabbone:refactor
..
compare: Kabbone:35c329c4d8570e8519ef13ea6b7aeed71dfa49d6
Branches Tags
Kabbone:main
Kabbone:dev
Kabbone:refactor

No commits in common. "ede4232f2853b7a4d269aabdef80052a70e2c815" and "35c329c4d8570e8519ef13ea6b7aeed71dfa49d6" have entirely different histories.
ede4232f28 ... 35c329c4d8

4 changed files with 11 additions and 7 deletions
Show Stats Expand all files Collapse all files

2
hosts/desktop/hardware-configuration.nix
View File

@ -21,8 +21,6 @@
boot.initrd.kernelModules = [ "vfio_pci" "vfio" "vfio_iommu_type1" "vfio_virqfd" ];
boot.kernelModules = [ "kvm-amd" ];
boot.extraModulePackages = [ ];
boot.tmpOnTmpfs = true;
zramSwap.enable = true;
fileSystems."/" =
{ device = "/dev/disk/by-label/NIXROOT";

2
hosts/laptop/hardware-configuration.nix
View File

@ -22,8 +22,6 @@
boot.kernelModules = [ "kvm-intel" ];
boot.extraModulePackages = [ ];
boot.kernelParams = [ "mitigations=off" "luks.options=fido2-device=auto" ];
boot.tmpOnTmpfs = true;
zramSwap.enable = true;
boot.initrd.luks = {
fido2Support = true;

2
hosts/server/hardware-configuration.nix
View File

@ -21,8 +21,6 @@
boot.initrd.kernelModules = [ "vfio_pci" "vfio" "vfio_iommu_type1" "vfio_virqfd" ];
boot.kernelModules = [ "kvm-amd" ];
boot.extraModulePackages = [ ];
boot.tmpOnTmpfs = true;
zramSwap.enable = true;
fileSystems."/" =
{ device = "/dev/disk/by-label/NIXROOT";

12
modules/services/server/gitea.nix
View File

@ -23,7 +23,11 @@
mailerPasswordFile = config.age.secrets."services/gitea/mailerPassword".path;
settings = {
server = {
SSH_PORT = 2220;
START_SSH_SERVER = true;
SSH_PORT = 2222;
# SSH_SERVER_CIPHERS = "";
# SSH_SERVER_KEY_EXCHANGES = "";
# SSH_SERVER_MACS = "";
ENABLE_GZIP = true;
};
security = {
@ -64,6 +68,12 @@
};
};
networking.firewall = {
interfaces.ens18 = {
allowedTCPPorts = [ 2222 ];
};
};
services.nginx = {
enable = true;
recommendedTlsSettings = true;