summaryrefslogtreecommitdiffstats
path: root/makefu/2configs/base.nix
diff options
context:
space:
mode:
authortv <tv@shackspace.de>2015-08-13 17:09:56 +0200
committertv <tv@shackspace.de>2015-08-13 17:09:56 +0200
commita33f90358d0f57025daddb0ae41d65707fb34cf3 (patch)
tree7f91c889c45fd8995af98d91b0670fb0e90b1d53 /makefu/2configs/base.nix
parent9f92ba455c4b13f4d960bae65cd577c9aad30dc4 (diff)
parent4366ffd6c5d401e3719a588f5ac98365aef8bd89 (diff)
Merge remote-tracking branch 'pnp/master'
Diffstat (limited to 'makefu/2configs/base.nix')
-rw-r--r--makefu/2configs/base.nix30
1 files changed, 27 insertions, 3 deletions
diff --git a/makefu/2configs/base.nix b/makefu/2configs/base.nix
index 8dfb2ef27..906c74f7d 100644
--- a/makefu/2configs/base.nix
+++ b/makefu/2configs/base.nix
@@ -2,11 +2,18 @@
with lib;
{
- imports = [ ];
+ imports = [
+ {
+ users.extraUsers =
+ mapAttrs (_: h: { hashedPassword = h; })
+ (import /root/src/secrets/hashedPasswords.nix);
+ }
+ ./vim.nix
+ ];
krebs.enable = true;
krebs.search-domain = "retiolum";
- networking.hostName = config.krebs.build.host.name;
+
users.extraUsers = {
root = {
openssh.authorizedKeys.keys = [ config.krebs.users.makefu.pubkey ];
@@ -24,12 +31,29 @@ with lib;
};
};
+ networking.hostName = config.krebs.build.host.name;
+ nix.maxJobs = config.krebs.build.host.cores + 1;
+ #nix.maxJobs = 1;
+
+ krebs.build.deps = {
+ secrets = {
+ url = "/home/makefu/secrets/${config.krebs.build.host.name}";
+ };
+ stockholm = {
+ url = toString ../..;
+ };
+ };
+
services.openssh.enable = true;
nix.useChroot = true;
- users.mutableUsers = true;
+ users.mutableUsers = false;
boot.tmpOnTmpfs = true;
+
+ networking.firewall.rejectPackets = true;
+ networking.firewall.allowPing = true;
+
systemd.tmpfiles.rules = [
"d /tmp 1777 root root - -"
];