35 lines
840 B
Nix
35 lines
840 B
Nix
{ ... }:
|
|
|
|
{
|
|
imports = [
|
|
../common.nix
|
|
../../services/openssh.nix
|
|
../../services/prometheus-node.nix
|
|
./podman.nix
|
|
./forgejo-runner.nix
|
|
];
|
|
|
|
networking = {
|
|
hostName = "forgejo-runner";
|
|
firewall = {
|
|
allowedTCPPorts = [
|
|
22 # SSH
|
|
];
|
|
};
|
|
};
|
|
|
|
users.users.root.openssh.authorizedKeys.keys = [
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMn0SP19A5C8PqdH+99ki3TILozj/U4tBSQxcRRepN21 samuel@pluto"
|
|
];
|
|
|
|
environment.etc."ssh/banner".text = ''
|
|
_ __ __ __ ___ ___ __ _ __
|
|
/\`'__\/\ \/\ \ /' _ `\ /' _ `\ /'__`\/\`'__\
|
|
\ \ \/ \ \ \_\ \/\ \/\ \/\ \/\ \/\ __/\ \ \/
|
|
\ \_\ \ \____/\ \_\ \_\ \_\ \_\ \____\\ \_\
|
|
\/_/ \/___/ \/_/\/_/\/_/\/_/\/____/ \/_/
|
|
'';
|
|
services.openssh.settings.Banner = "/etc/ssh/banner";
|
|
|
|
system.stateVersion = "26.05";
|
|
}
|