qo.is/infrastructure
3
0
Fork 0
Code Issues 11 Pull requests Projects 1 Activity Actions

Compare commits

base: qo.is:bcf390e8a753c65542d2688a1de1976de7eea5a0
Branches Tags
qo.is:main
qo.is:18-caral
..
compare: qo.is:6661ab441db4bb41f473a00ff9cf28625ab1e886
Branches Tags
qo.is:main
qo.is:18-caral

4 commits
bcf390e8a7 ... 6661ab441d

Author SHA1 Message Date
Fabian Hauser
6661ab441d Update inputs
Some checks failed
CI / build (push) Has been cancelled
Details
2024-12-09 16:44:27 +02:00
Fabian Hauser
9b83ccf8c5 Refactore backplane-net to module with hosts
Some checks failed
CI / build (push) Has been cancelled
Details
2024-12-09 16:30:45 +02:00
Fabian Hauser
df41008026 Refactor attic configuration as module
Some checks failed
CI / build (push) Has been cancelled
Details
2024-12-08 17:45:54 +02:00
Fabian Hauser
1b3a091fae Remove self-hosted subsitution services from lindberg-build 2024-12-08 17:16:55 +02:00
1 changed files with 19 additions and 20 deletions
Show stats Expand all files Collapse all files

39
defaults/base-minimal/default.nix
View file

@ -52,26 +52,21 @@
# Package management
nix = {
settings =
let
substituters = [
"https://${inputs.self.nixosConfigurations.lindberg-build.config.qois.nixpkgs-cache.hostname}?priority=39"
"https://cache.nixos.org?priority=40"
"https://attic.qo.is/qois-infrastructure"
];
in
{
trusted-users = [
"root"
"@wheel"
];
trusted-public-keys = [
"cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY="
"qois-infrastructure:lh35ymN7Aoxm5Hz0S6JusxE+cYzMU+x9OMKjDVIpfuE="
];
trusted-substituters = substituters; # For hosts that limit the subst list
inherit substituters;
};
settings = {
trusted-users = [
"root"
"@wheel"
];
substituters = [
"https://${inputs.self.nixosConfigurations.lindberg-build.config.qois.nixpkgs-cache.hostname}?priority=39"
"https://cache.nixos.org?priority=40"
"https://attic.qo.is/qois-infrastructure"
];
trusted-public-keys = [
"cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY="
"qois-infrastructure:lh35ymN7Aoxm5Hz0S6JusxE+cYzMU+x9OMKjDVIpfuE="
];
};
gc = {
automatic = true;
dates = "weekly";
@ -92,6 +87,10 @@
services.openssh = {
enable = true;
settings.PasswordAuthentication = false;
# temporary mitigation agains CVE-2024-6387 «regreSSHion» RCE
# See https://github.com/NixOS/nixpkgs/pull/323753#issuecomment-2199762128
settings.LoginGraceTime = 0;
};
security.acme = {