kat/nixfiles
1
0
Fork 0
mirror of https://github.com/kittywitch/nixfiles.git synced 2026-02-09 04:19:19 -08:00
Code Issues Projects Releases Packages Wiki Activity

feat: vicinae, update servers

Browse source
This commit is contained in:
Kat Inskip 2025-12-09 05:34:53 -08:00
parent 0e91b2184d
commit edd507c0ec
Signed by: kat
GPG key ID: 465E64DECEA8CF0F
20 changed files with 188 additions and 187 deletions
Download patch file Download diff file Expand all files Collapse all files

6
nixos/common/ssh.nix
View file

@ -16,7 +16,11 @@ in {
services.openssh = {
enable = true;
settings = {
KexAlgorithms = ["curve25519-sha256@libssh.org"];
KexAlgorithms = [
"mlkem768x25519-sha256"
"sntrup761x25519-sha512"
"curve25519-sha256@libssh.org"
];
PasswordAuthentication = false;
KbdInteractiveAuthentication = false;
PermitRootLogin = mkDefault "prohibit-password";

7
nixos/servers/web/acme.nix
View file

@ -1,8 +1,13 @@
{config, ...}: {
{
config,
lib,
...
}: {
security.acme = {
defaults = {
dnsProvider = "cloudflare";
credentialsFile = config.sops.secrets.acme_credentials.path;
email = lib.mkDefault "acme@inskip.me";
};
acceptTerms = true;
};