diff options
author | lassulus <lass@aidsballs.de> | 2015-11-21 14:25:02 +0100 |
---|---|---|
committer | lassulus <lass@aidsballs.de> | 2015-11-21 14:25:02 +0100 |
commit | f531e7e62573d59b3a92cbac1bc224ec1ab5f3cc (patch) | |
tree | 49582b817265fd7b6dfc8a524a84af7ed12ba28f /makefu/1systems/wry.nix | |
parent | a0202683177b022e3f2b67cd5929baccb868a26e (diff) | |
parent | a8d007868342517c235963a8ab13cff7c0e5d59e (diff) |
Merge remote-tracking branch 'pnp/master'
Diffstat (limited to 'makefu/1systems/wry.nix')
-rw-r--r-- | makefu/1systems/wry.nix | 17 |
1 files changed, 12 insertions, 5 deletions
diff --git a/makefu/1systems/wry.nix b/makefu/1systems/wry.nix index ba94972fb..cd2b3f657 100644 --- a/makefu/1systems/wry.nix +++ b/makefu/1systems/wry.nix @@ -24,11 +24,11 @@ in { # other nginx ../2configs/nginx/euer.wiki.nix ../2configs/nginx/euer.blog.nix + ../2configs/nginx/euer.test.nix # collectd ../2configs/collectd/collectd-base.nix ]; - krebs.build.host = config.krebs.hosts.wry; krebs.Reaktor.enable = true; @@ -59,9 +59,12 @@ in { }; networking = { - firewall.allowPing = true; - firewall.allowedTCPPorts = [ 53 80 443 ]; - firewall.allowedUDPPorts = [ 655 ]; + firewall = { + allowPing = true; + logRefusedConnections = false; + allowedTCPPorts = [ 53 80 443 ]; + allowedUDPPorts = [ 655 ]; + }; interfaces.enp2s1.ip4 = [{ address = external-ip; prefixLength = 24; @@ -70,5 +73,9 @@ in { nameservers = [ "8.8.8.8" ]; }; - environment.systemPackages = [ pkgs.translate-shell ]; + # small machine - do not forget to gc every day + nix.gc.automatic = true; + nix.gc.dates = "03:10"; + + environment.systemPackages = [ ]; } |