39 lines
794 B
Nix
39 lines
794 B
Nix
{ ... }:
|
|
|
|
{
|
|
imports = [
|
|
../common.nix
|
|
../../services/openssh.nix
|
|
../../services/prometheus-node.nix
|
|
./mqtt.nix
|
|
];
|
|
|
|
networking = {
|
|
hostName = "mqtt";
|
|
firewall = {
|
|
allowedTCPPorts = [
|
|
22 # SSH
|
|
80 # HTTP/1
|
|
443 # HTTP/2
|
|
];
|
|
allowedUDPPorts = [
|
|
443 # HTTP/3
|
|
];
|
|
};
|
|
};
|
|
|
|
environment.etc."ssh/banner".text = ''
|
|
__ __
|
|
/\ \__/\ \__
|
|
___ ___ __\ \ ,_\ \ ,_\
|
|
/' __` __`\ /'__`\ \ \/\ \ \/
|
|
/\ \/\ \/\ \/\ \L\ \ \ \_\ \ \_
|
|
\ \_\ \_\ \_\ \___, \ \__\\ \__\
|
|
\/_/\/_/\/_/\/___/\ \/__/ \/__/
|
|
\ \_\
|
|
\/_/
|
|
'';
|
|
services.openssh.settings.Banner = "/etc/ssh/banner";
|
|
|
|
system.stateVersion = "26.05";
|
|
}
|