From b14e55d25aa3c42685b8bab3bd9b52e53c22426f Mon Sep 17 00:00:00 2001 From: makefu Date: Wed, 29 Jul 2015 15:38:47 +0200 Subject: pnp: allow ping for faster irc connect --- makefu/1systems/pnp.nix | 1 + 1 file changed, 1 insertion(+) (limited to 'makefu/1systems') diff --git a/makefu/1systems/pnp.nix b/makefu/1systems/pnp.nix index 4c4ce716f..536e08187 100644 --- a/makefu/1systems/pnp.nix +++ b/makefu/1systems/pnp.nix @@ -40,6 +40,7 @@ # networking.firewall is enabled by default networking.firewall.allowedTCPPorts = [ 80 ]; + networking.firewall.allowPing = true; fileSystems."/" = { device = "/dev/disk/by-label/nixos"; -- cgit v1.2.3 From d516f329dae8e3d282ab699227667995ce1b2bee Mon Sep 17 00:00:00 2001 From: makefu Date: Wed, 29 Jul 2015 15:41:38 +0200 Subject: prepare repunit --- makefu/1systems/repunit.nix | 63 +++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 63 insertions(+) (limited to 'makefu/1systems') diff --git a/makefu/1systems/repunit.nix b/makefu/1systems/repunit.nix index e69de29bb..7596a3d54 100644 --- a/makefu/1systems/repunit.nix +++ b/makefu/1systems/repunit.nix @@ -0,0 +1,63 @@ +# Edit this configuration file to define what should be installed on +# your system. Help is available in the configuration.nix(5) man page +# and in the NixOS manual (accessible by running ‘nixos-help’). + +{ config, pkgs, ... }: + +{ + imports = + [ # Include the results of the hardware scan. + + ../2configs/base.nix + ../2configs/cgit-retiolum.nix + ]; + krebs.build.host = config.krebs.hosts.repunit; + krebs.build.user = config.krebs.users.makefu; + krebs.build.target = "root@repunit"; + + krebs.build.deps = { + nixpkgs = { + url = https://github.com/NixOS/nixpkgs; + rev = "4c01e6d91993b6de128795f4fbdd25f6227fb870"; + }; + secrets = { + url = "/home/makefu/secrets/${config.krebs.build.host.name}"; + }; + stockholm = { + url = toString ../..; + }; + }; + + boot.loader.grub.enable = true; + boot.loader.grub.version = 2; + boot.loader.grub.device = "/dev/vda"; + + boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "ehci_pci" "virtio_pci" "virtio_blk" ]; + boot.kernelModules = [ ]; + boot.extraModulePackages = [ ]; + hardware.enableAllFirmware = true; + hardware.cpu.amd.updateMicrocode = true; + +# networking.firewall is enabled by default + networking.firewall.allowedTCPPorts = [ 80 ]; + networking.firewall.allowPing = true; + + fileSystems."/" = + { device = "/dev/disk/by-label/nixos"; + fsType = "ext4"; + }; + krebs.retiolum = { + enable = true; + hosts = ../../Zhosts; + connectTo = [ + "gum" + "pigstarter" + "fastpoke" + ]; + }; + +# $ nix-env -qaP | grep wget + environment.systemPackages = with pkgs; [ + jq + ]; +} -- cgit v1.2.3 From 65d79890493600b09dc01209a378c070f2f0a028 Mon Sep 17 00:00:00 2001 From: makefu Date: Wed, 29 Jul 2015 15:50:37 +0200 Subject: add firewall reject instead of drop --- makefu/1systems/pnp.nix | 1 + 1 file changed, 1 insertion(+) (limited to 'makefu/1systems') diff --git a/makefu/1systems/pnp.nix b/makefu/1systems/pnp.nix index 536e08187..549658983 100644 --- a/makefu/1systems/pnp.nix +++ b/makefu/1systems/pnp.nix @@ -40,6 +40,7 @@ # networking.firewall is enabled by default networking.firewall.allowedTCPPorts = [ 80 ]; + networking.firewall.rejectPackets = true; networking.firewall.allowPing = true; fileSystems."/" = -- cgit v1.2.3