44 lines
854 B
Nix
44 lines
854 B
Nix
{ ... }:
|
|
|
|
{
|
|
imports = [
|
|
../common.nix
|
|
../../services/openssh.nix
|
|
../../services/prometheus-node.nix
|
|
./forgejo.nix
|
|
#./forgejo-runner.nix
|
|
];
|
|
|
|
networking = {
|
|
hostName = "git";
|
|
firewall = {
|
|
allowedTCPPorts = [
|
|
22 # SSH
|
|
80 # HTTP/1
|
|
443 # HTTP/2
|
|
];
|
|
allowedUDPPorts = [
|
|
443 # HTTP/3
|
|
];
|
|
};
|
|
};
|
|
|
|
users.users.root.openssh.authorizedKeys.keys = [
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMn0SP19A5C8PqdH+99ki3TILozj/U4tBSQxcRRepN21 samuel@pluto"
|
|
];
|
|
|
|
environment.etc."ssh/banner".text = ''
|
|
__
|
|
__/\ \__
|
|
__ /\_\ \ ,_\
|
|
/'_ `\/\ \ \ \/
|
|
/\ \L\ \ \ \ \ \_
|
|
\ \____ \ \_\ \__\
|
|
\/___L\ \/_/\/__/
|
|
/\____/
|
|
\_/__/
|
|
'';
|
|
services.openssh.settings.Banner = "/etc/ssh/banner";
|
|
|
|
system.stateVersion = "25.11";
|
|
}
|