Luj/snowfield
1
0
Fork 0
mirror of https://github.com/JulienMalka/snowfield.git synced 2025-03-29 07:10:51 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Tested colmena on core-security

Browse source
This commit is contained in:
Julien Malka 2023-07-27 20:35:00 +02:00
parent 40b24b75a7
commit a2d07f04ed
Signed by: Luj
GPG key ID: 6FC74C847011FD83
1 changed files with 9 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
machines/core-security/default.nix
View file

@ -1,4 +1,4 @@
{ config, pkgs, ... }: { config, pkgs, lib, ... }:
{ {
imports = imports =
@ -14,6 +14,12 @@
boot.loader.grub.device = "/dev/sda"; boot.loader.grub.device = "/dev/sda";
boot.loader.grub.useOSProber = true; boot.loader.grub.useOSProber = true;
deployment = {
targetHost = "core-security.luj";
targetPort = 45;
targetUser = "root";
};
security.acme.defaults.email = "julien@malka.sh"; security.acme.defaults.email = "julien@malka.sh";
networking.hostName = "core-security"; # Define your hostname. networking.hostName = "core-security"; # Define your hostname.
@ -73,7 +79,8 @@
networking.firewall.checkReversePath = "loose"; networking.firewall.checkReversePath = "loose";
systemd.services.NetworkManager-wait-online.enable = false; systemd.services.NetworkManager-wait-online.enable = lib.mkForce false;
systemd.services.systemd-networkd-wait-online.enable = lib.mkForce false;
luj.nginx.enable = true; luj.nginx.enable = true;