aboutsummaryrefslogtreecommitdiff
path: root/modules
diff options
context:
space:
mode:
Diffstat (limited to '')
-rw-r--r--modules/nixos/default.nix4
-rw-r--r--modules/nixos/podman.nix13
-rw-r--r--modules/nixos/ssh.nix21
-rw-r--r--profiles/cgroups.nix (renamed from modules/nixos/cgroups.nix)0
-rw-r--r--profiles/defaults.nix (renamed from modules/nixos/base.nix)13
5 files changed, 0 insertions, 51 deletions
diff --git a/modules/nixos/default.nix b/modules/nixos/default.nix
index bc5c6de..a3c5d70 100644
--- a/modules/nixos/default.nix
+++ b/modules/nixos/default.nix
@@ -2,15 +2,11 @@
{
imports = [
./backups.nix
- ./base.nix
- ./cgroups.nix
./hardware
./home-manager.nix
./nas-client.nix
./nix.nix
- ./podman.nix
./remote-unlock.nix
- ./ssh.nix
./user.nix
];
}
diff --git a/modules/nixos/podman.nix b/modules/nixos/podman.nix
deleted file mode 100644
index bd5aa3c..0000000
--- a/modules/nixos/podman.nix
+++ /dev/null
@@ -1,13 +0,0 @@
-{
- virtualisation.podman = {
- enable = true;
- dockerCompat = true;
- autoPrune.enable = true;
- autoPrune.flags = [
- "--all"
- ];
- defaultNetwork.settings.dns_enabled = true;
- };
-
- virtualisation.oci-containers.backend = "podman";
-}
diff --git a/modules/nixos/ssh.nix b/modules/nixos/ssh.nix
deleted file mode 100644
index b4c8772..0000000
--- a/modules/nixos/ssh.nix
+++ /dev/null
@@ -1,21 +0,0 @@
-{ lib, ... }:
-{
- networking.firewall.allowedTCPPorts = [ 22 ];
-
- services.openssh = {
- enable = lib.mkDefault true;
- settings = {
- PasswordAuthentication = lib.mkForce false;
- KbdInteractiveAuthentication = lib.mkForce false;
-
- PermitRootLogin = lib.mkForce "prohibit-password";
- };
- openFirewall = lib.mkDefault true;
- hostKeys = [
- {
- path = "/etc/ssh/ssh_host_ed25519_key";
- type = "ed25519";
- }
- ];
- };
-}
diff --git a/modules/nixos/cgroups.nix b/profiles/cgroups.nix
index 07dc964..07dc964 100644
--- a/modules/nixos/cgroups.nix
+++ b/profiles/cgroups.nix
diff --git a/modules/nixos/base.nix b/profiles/defaults.nix
index 9ed3abc..7c8a7fb 100644
--- a/modules/nixos/base.nix
+++ b/profiles/defaults.nix
@@ -39,19 +39,6 @@
dnssec = "false";
};
- services.fail2ban = {
- enable = true;
- ignoreIP = [
- "10.100.0.0/24" # wireguard
- ];
- bantime = "1h";
- bantime-increment = {
- enable = true;
- maxtime = "168h";
- factor = "4";
- };
- };
-
i18n = {
defaultLocale = "en_US.UTF-8";
supportedLocales = [