kubernauts/iac
Watch
0
0
Fork
You've already forked iac
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

foo

Browse source
This commit is contained in:
XenGi 2026-08-28 17:39:53 +02:00
commit 9742bed033
Signed by: xengi
SSH key fingerprint: SHA256:dM+fLZGsDvyv6kunjE8bGduL24VsCFB4LEOSdmRHdG0
15 changed files with 355 additions and 35 deletions
Download patch file Download diff file Expand all files Collapse all files

3
services/etcd.nix
View file

@ -21,9 +21,12 @@ in
#keyFile = config.age.secrets.etcd_server_key.path;
#certFile = config.age.secrets.etcd_server_key.path;
};
<<<<<<< HEAD
networking.firewall.extraInputRules = ''
ip6 saddr {${controlPlaneIpSet} ip6 daddr ${ip} tcp dport 2380 accept comment "Allow etcd peers"
ip6 saddr {${controlPlaneIpSet} ip6 daddr ${ip} tcp dport 2379 accept comment "Allow etcd clients"
'';
=======
>>>>>>> b9de4f3c256492a785e296898739a5e4674025fc
}

16
services/openssh.nix Normal file
View file

@ -0,0 +1,16 @@
{ ... }:
{
services = {
openssh = {
enable = true;
ports = [ 10022 ];
openFirewall = true;
settings = {
PasswordAuthentication = false;
KbdInteractiveAuthentication = false;
};
};
};
}