Armael/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Compare commits

base: Armael:d7fc75a3fc8ac3cae0cf6ddb06129e9521695fa5
Branches Tags
Armael:main
..
compare: Armael:1fe2075869d9b6e97696769fc28466c15d58b028
Branches Tags
Armael:main

2 commits
d7fc75a3fc ... 1fe2075869

Author SHA1 Message Date
root
1fe2075869 pastila: enable zfs scrub/snapshot 2024-05-31 11:27:48 +02:00
root
26e139e21d common: enable fail2ban 2024-05-31 11:22:53 +02:00
2 changed files with 18 additions and 0 deletions
Show stats Expand all files Collapse all files

2
common/configuration.nix
View file

@ -10,6 +10,8 @@
services.openssh.enable = true; services.openssh.enable = true;
services.openssh.settings.PermitRootLogin = lib.mkDefault "no"; services.openssh.settings.PermitRootLogin = lib.mkDefault "no";
services.fail2ban.enable = true;
# Activate nix flakes. # Activate nix flakes.
nix.settings.experimental-features = [ "nix-command" "flakes" ]; nix.settings.experimental-features = [ "nix-command" "flakes" ];

16
pastila/configuration.nix
View file

@ -17,6 +17,22 @@ in
boot.loader.grub.enable = true; boot.loader.grub.enable = true;
boot.loader.grub.device = "/dev/vda"; boot.loader.grub.device = "/dev/vda";
# use the latest kernel compatible with zfs
boot.kernelPackages = config.boot.zfs.package.latestCompatibleLinuxPackages;
# setup automatic snapshots (~short term: retain no more than 1 month)
services.zfs.autoSnapshot = {
enable = true;
frequent = 0;
monthly = 0;
};
# automatic scrub, 10th of each month at 3AM
services.zfs.autoScrub = {
enable = true;
interval = "*-*-10 03:00:00";
};
networking.hostName = "pastila"; # Define your hostname. networking.hostName = "pastila"; # Define your hostname.
networking.hostId = "8425e349"; networking.hostId = "8425e349";