eliribble
/
nixos-systems
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Compare commits

base: eliribble:7c7b53349a3742bebdd382bc0101d2469d998fe1
Branches Tags
eliribble:main
..
compare: eliribble:5421eccc0b838ed6ce99aff3550ea8193be01628
Branches Tags
eliribble:main

2 Commits
7c7b53349a ... 5421eccc0b

Author SHA1 Message Date
Eli Ribble 5421eccc0b Disable password auth in SSH and root login 
More secure.
 2025-01-05 19:06:15 -07:00
Eli Ribble a154a67ac8 Re-enable the bare 'sovr.cloud' certificate 
It works now that our DNS entries are correct.
 2025-01-05 19:05:10 -07:00
1 changed files with 9 additions and 3 deletions
Show Stats Expand all files Collapse all files

12
sovr/etc/nixos/configuration.nix
View File

@ -49,12 +49,12 @@
environmentFile = "/opt/keys/porkbun"; environmentFile = "/opt/keys/porkbun";
group = "nginx"; group = "nginx";
}; };
/*certs."sovr.cloud" = { certs."sovr.cloud" = {
dnsProvider = "porkbun"; dnsProvider = "porkbun";
domain = "sovr.cloud"; domain = "sovr.cloud";
environmentFile = "/opt/keys/porkbun"; environmentFile = "/opt/keys/porkbun";
group = "nginx"; group = "nginx";
};*/ };
defaults.email = "eli@theribbles.org"; defaults.email = "eli@theribbles.org";
}; };
# Configure network proxy if necessary # Configure network proxy if necessary
@ -65,7 +65,13 @@
enable = true; enable = true;
network.enable = true; network.enable = true;
}; };
services.openssh.enable = true; services.openssh = {
enable = true;
# require public key authentication for better security
settings.PasswordAuthentication = false;
settings.KbdInteractiveAuthentication = false;
settings.PermitRootLogin = "no";
};
services.sovr-server = { services.sovr-server = {
enable = true; enable = true;
sessionSecret = "secret"; sessionSecret = "secret";