diff options
author | tv <tv@shackspace.de> | 2015-08-28 21:54:35 +0200 |
---|---|---|
committer | tv <tv@shackspace.de> | 2015-08-28 21:54:35 +0200 |
commit | e5ecd75ac266a77c31790e52c2ea000574be9e22 (patch) | |
tree | eecdc35c4a8f257d86178f6eb864c9404a2f1aa7 /lass/2configs/base.nix | |
parent | 62865ae6ae46e006cea7ee80b931fc5be27d3449 (diff) | |
parent | ecae9b59753c13ea5bff57a6f7c44086c77844d6 (diff) |
Merge remote-tracking branch 'uriel/master'
Diffstat (limited to 'lass/2configs/base.nix')
-rw-r--r-- | lass/2configs/base.nix | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/lass/2configs/base.nix b/lass/2configs/base.nix index 095c7660c..d44a19c1e 100644 --- a/lass/2configs/base.nix +++ b/lass/2configs/base.nix @@ -39,12 +39,20 @@ with lib; krebs = { enable = true; search-domain = "retiolum"; + exim-retiolum.enable = true; + build.deps.nixpkgs = { + url = https://github.com/Lassulus/nixpkgs; + rev = "58a82ff50b8605b88a8f66481d8c85bf8ab53be3"; + }; }; nix.useChroot = true; users.mutableUsers = false; + #why is this on in the first place? + services.ntp.enable = false; + boot.tmpOnTmpfs = true; # see tmpfiles.d(5) systemd.tmpfiles.rules = [ @@ -134,6 +142,7 @@ with lib; { predicate = "-p icmp"; target = "ACCEPT"; precedence = 10000; } { predicate = "-i lo"; target = "ACCEPT"; precedence = 9999; } { predicate = "-p tcp --dport 22"; target = "ACCEPT"; precedence = 9998; } + { predicate = "-i retiolum"; target = "REJECT"; precedence = -10000; } ]; }; }; |