commit 392fdcd942b4dc3262f69e78f053e8d7f9407083 · dunkirk.sh/dots

+11 -3
machines/prattle/default.nix
···

       111
       111
        
         networking = {

     

       112
       112
        
           hostName = "prattle";

     

       113
       113
        
           useDHCP = false;

     

       114
       114
       -
           interfaces.eth0 = {

     

       115
       115
       -
             useDHCP = true;

     

       116
       116
       -
           };

     

       117
       114
        
           defaultGateway = "10.0.0.1";

     

       118
       115
        
           nameservers = [

     

       119
       116
        
             "1.1.1.1"

     
···

       121
       118
        
             "2606:4700:4700::1111"

     

       122
       119
        
             "2606:4700:4700::1001"

     

       123
       120
        
           ];

     

       121
       121
       +
           interfaces.eth0 = {

     

       122
       122
       +
             ipv4.addresses = [

     

       123
       123
       +
               {

     

       124
       124
       +
                 address = "10.0.0.70";

     

       125
       125
       +
                 prefixLength = 24;

     

       126
       126
       +
               }

     

       127
       127
       +
             ];

     

       128
       128
       +
             useDHCP = false;

     

       129
       129
       +
           };

     

       124
       130
        
         };

     

       125
       131
        
       

     

       126
       132
        
         programs.zsh.enable = true;

     
···

       146
       152
        
       

     

       147
       153
        
         services.openssh = {

     

       148
       154
        
           enable = true;

     

       155
       155
       +
           openFirewall = true;

     

       149
       156
        
           settings = {

     

       150
       157
        
             PermitRootLogin = "no";

     

       151
       158
        
             PasswordAuthentication = false;

     
···

       154
       161
        
       

     

       155
       162
        
         networking.firewall = {

     

       156
       163
        
           enable = true;

     

       164
       164
       +
           allowedTCPPorts = [ 22 ];

     

       157
       165
        
           logRefusedConnections = false;

     

       158
       166
        
           rejectPackets = true;

     

       159
       167
        
         };