qo.is/infrastructure
3
0
Fork 0
Code Issues 11 Pull requests Projects 1 Activity Actions

Compare commits

base: qo.is:bcf390e8a753c65542d2688a1de1976de7eea5a0
Branches Tags
qo.is:main
qo.is:18-caral
..
compare: qo.is:6661ab441db4bb41f473a00ff9cf28625ab1e886
Branches Tags
qo.is:main
qo.is:18-caral

4 commits
bcf390e8a7 ... 6661ab441d

Author SHA1 Message Date
Fabian Hauser
6661ab441d Update inputs
Some checks failed
CI / build (push) Has been cancelled
Details
2024-12-09 16:44:27 +02:00
Fabian Hauser
9b83ccf8c5 Refactore backplane-net to module with hosts
Some checks failed
CI / build (push) Has been cancelled
Details
2024-12-09 16:30:45 +02:00
Fabian Hauser
df41008026 Refactor attic configuration as module
Some checks failed
CI / build (push) Has been cancelled
Details
2024-12-08 17:45:54 +02:00
Fabian Hauser
1b3a091fae Remove self-hosted subsitution services from lindberg-build 2024-12-08 17:16:55 +02:00
1 changed files with 19 additions and 20 deletions
Show stats Expand all files Collapse all files

39
defaults/base-minimal/default.nix
View file

@ -52,26 +52,21 @@
# Package management # Package management
nix = { nix = {
settings = settings = {
let trusted-users = [
substituters = [ "root"
"https://${inputs.self.nixosConfigurations.lindberg-build.config.qois.nixpkgs-cache.hostname}?priority=39" "@wheel"
"https://cache.nixos.org?priority=40" ];
"https://attic.qo.is/qois-infrastructure" substituters = [
]; "https://${inputs.self.nixosConfigurations.lindberg-build.config.qois.nixpkgs-cache.hostname}?priority=39"
in "https://cache.nixos.org?priority=40"
{ "https://attic.qo.is/qois-infrastructure"
trusted-users = [ ];
"root" trusted-public-keys = [
"@wheel" "cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY="
]; "qois-infrastructure:lh35ymN7Aoxm5Hz0S6JusxE+cYzMU+x9OMKjDVIpfuE="
trusted-public-keys = [ ];
"cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=" };
"qois-infrastructure:lh35ymN7Aoxm5Hz0S6JusxE+cYzMU+x9OMKjDVIpfuE="
];
trusted-substituters = substituters; # For hosts that limit the subst list
inherit substituters;
};
gc = { gc = {
automatic = true; automatic = true;
dates = "weekly"; dates = "weekly";
@ -92,6 +87,10 @@
services.openssh = { services.openssh = {
enable = true; enable = true;
settings.PasswordAuthentication = false; settings.PasswordAuthentication = false;
# temporary mitigation agains CVE-2024-6387 «regreSSHion» RCE
# See https://github.com/NixOS/nixpkgs/pull/323753#issuecomment-2199762128
settings.LoginGraceTime = 0;
}; };
security.acme = { security.acme = {