diff options
author | tv <tv@shackspace.de> | 2015-08-13 17:09:56 +0200 |
---|---|---|
committer | tv <tv@shackspace.de> | 2015-08-13 17:09:56 +0200 |
commit | a33f90358d0f57025daddb0ae41d65707fb34cf3 (patch) | |
tree | 7f91c889c45fd8995af98d91b0670fb0e90b1d53 /makefu/2configs/base.nix | |
parent | 9f92ba455c4b13f4d960bae65cd577c9aad30dc4 (diff) | |
parent | 4366ffd6c5d401e3719a588f5ac98365aef8bd89 (diff) |
Merge remote-tracking branch 'pnp/master'
Diffstat (limited to 'makefu/2configs/base.nix')
-rw-r--r-- | makefu/2configs/base.nix | 30 |
1 files changed, 27 insertions, 3 deletions
diff --git a/makefu/2configs/base.nix b/makefu/2configs/base.nix index 8dfb2ef2..906c74f7 100644 --- a/makefu/2configs/base.nix +++ b/makefu/2configs/base.nix @@ -2,11 +2,18 @@ with lib; { - imports = [ ]; + imports = [ + { + users.extraUsers = + mapAttrs (_: h: { hashedPassword = h; }) + (import /root/src/secrets/hashedPasswords.nix); + } + ./vim.nix + ]; krebs.enable = true; krebs.search-domain = "retiolum"; - networking.hostName = config.krebs.build.host.name; + users.extraUsers = { root = { openssh.authorizedKeys.keys = [ config.krebs.users.makefu.pubkey ]; @@ -24,12 +31,29 @@ with lib; }; }; + networking.hostName = config.krebs.build.host.name; + nix.maxJobs = config.krebs.build.host.cores + 1; + #nix.maxJobs = 1; + + krebs.build.deps = { + secrets = { + url = "/home/makefu/secrets/${config.krebs.build.host.name}"; + }; + stockholm = { + url = toString ../..; + }; + }; + services.openssh.enable = true; nix.useChroot = true; - users.mutableUsers = true; + users.mutableUsers = false; boot.tmpOnTmpfs = true; + + networking.firewall.rejectPackets = true; + networking.firewall.allowPing = true; + systemd.tmpfiles.rules = [ "d /tmp 1777 root root - -" ]; |