From a2d07f04eddec21e47eb29b4a77c509ff7960e0c Mon Sep 17 00:00:00 2001
From: Julien Malka <julien@malka.sh>
Date: Thu, 27 Jul 2023 20:35:00 +0200
Subject: [PATCH] Tested colmena on core-security
---
machines/core-security/default.nix | 11 +++++++++--
1 file changed, 9 insertions(+), 2 deletions(-)
diff --git a/machines/core-security/default.nix b/machines/core-security/default.nix
index 4f66381..9a9a933 100644
--- a/machines/core-security/default.nix
+++ b/machines/core-security/default.nix
@@ -1,4 +1,4 @@
-{ config, pkgs, ... }:
+{ config, pkgs, lib, ... }:
{
imports =
@@ -14,6 +14,12 @@
boot.loader.grub.device = "/dev/sda";
boot.loader.grub.useOSProber = true;
+ deployment = {
+ targetHost = "core-security.luj";
+ targetPort = 45;
+ targetUser = "root";
+ };
+
security.acme.defaults.email = "julien@malka.sh";
networking.hostName = "core-security"; # Define your hostname.
@@ -73,7 +79,8 @@
networking.firewall.checkReversePath = "loose";
- systemd.services.NetworkManager-wait-online.enable = false;
+ systemd.services.NetworkManager-wait-online.enable = lib.mkForce false;
+ systemd.services.systemd-networkd-wait-online.enable = lib.mkForce false;
luj.nginx.enable = true;