From dc9a1fc8477277094dc58e653e5c1e7cf524611e Mon Sep 17 00:00:00 2001 From: polsevev Date: Tue, 20 May 2025 20:06:49 +0200 Subject: [PATCH] more config of the ares nixos setup --- nixos/ares/configuration.nix | 8 ++++---- nixos/ares/flake.nix | 1 - 2 files changed, 4 insertions(+), 5 deletions(-) diff --git a/nixos/ares/configuration.nix b/nixos/ares/configuration.nix index b16150e..0dbd135 100644 --- a/nixos/ares/configuration.nix +++ b/nixos/ares/configuration.nix @@ -25,7 +25,7 @@ # Enable networking networking.networkmanager.enable = true; networking.defaultGateway.address = "192.168.1.1"; - networking.interfaces.enp3s0.ipv4.addresses = [{ + networking.interfaces.enp1s0.ipv4.addresses = [{ address = "192.168.1.23"; prefixLength = 24; }]; @@ -72,12 +72,12 @@ # Enable touchpad support (enabled default in most desktopManager). # services.libinput.enable = true; + security.sudo.wheelNeedsPassword = false; # Define a user account. Don't forget to set a password with ‘passwd’. users.users.ares = { isNormalUser = true; extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user. openssh.authorizedKeys.keys = [ - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAGKOGZKJO31YZem1OTZtIg3fKaatbFmqmRNRD+K9GpX rgl002@student.uib.no" "sk-ecdsa-sha2-nistp256@openssh.com AAAAInNrLWVjZHNhLXNoYTItbmlzdHAyNTZAb3BlbnNzaC5jb20AAAAIbmlzdHAyNTYAAABBBDpeouwzFZoYA7AYARaJ/qdQHORJB2h1V73PXQYEAI7sDrc3kYwgZPbrZ3pGkGKaHBl45kiV6SYsC7191OCwIl8AAAAEc3NoOg== A" "sk-ecdsa-sha2-nistp256@openssh.com AAAAInNrLWVjZHNhLXNoYTItbmlzdHAyNTZAb3BlbnNzaC5jb20AAAAIbmlzdHAyNTYAAABBBHlAtX4mBifZZ8u6sJckCgA6skwN7aamVK+lQuXLQ6kQWJy7GlEXEmoR9RW/0UIrQYLC+wd8Q5MROkYpn+cHLSoAAAAEc3NoOg== B" ]; @@ -90,15 +90,14 @@ vim tailscale python3 + disko ]; nixpkgs.config.allowUnfree = true; nix.settings.experimental-features = [ "nix-command" "flakes" ]; # programs.firefox.enable = true; - services.tailscale.enable = true; # Enable the OpenSSH daemon. - services.openssh.settings.PermitRootLogin = "no"; # List packages installed in system profile. To search, run: # $ nix search wget # environment.systemPackages = with pkgs; [ @@ -120,6 +119,7 @@ services.openssh = { enable = true; settings = { + PermitRootLogin = "no"; PasswordAuthentication = true; }; }; diff --git a/nixos/ares/flake.nix b/nixos/ares/flake.nix index 3e605fb..61e1dea 100644 --- a/nixos/ares/flake.nix +++ b/nixos/ares/flake.nix @@ -14,7 +14,6 @@ # Import the previous configuration.nix we used, # so the old configuration file still takes effect ./configuration.nix - ./nginx.nix ]; }; };