KokaKiwi/nixcfg
1
0
Fork 0
forked from Deuxfleurs/nixcfg
Code Pull requests Activity

Move ssh to port 110, update nomad to 1.7

Browse source
This commit is contained in:
Maximilien Richer 2025-02-10 11:06:24 +01:00
parent 43c46ef041
commit 38929646bf
Signed by untrusted user: maximilien
GPG key ID: 04FD5063D6D43365
7 changed files with 10 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
cluster/staging/cluster.nix
View file

@ -100,8 +100,8 @@
## ===== EXPERIMENTAL SECTION FOR STAGING CLUSTER ===== ## ===== EXPERIMENTAL SECTION FOR STAGING CLUSTER =====
# Test nomad 1.6 # Test nomad 1.7
services.nomad.package = pkgs.nomad_1_6; services.nomad.package = pkgs.nomad_1_7;
nixpkgs.config.allowUnfree = true; # Accept nomad's BSL license nixpkgs.config.allowUnfree = true; # Accept nomad's BSL license
# We're doing lots of experiments so GC periodically is usefull. # We're doing lots of experiments so GC periodically is usefull.

2
cluster/staging/node/df-pw5.nix
View file

@ -14,5 +14,5 @@
deuxfleurs.staticIPv6.address = "2a02:a03f:6510:5102:223:24ff:feb0:e8a7"; deuxfleurs.staticIPv6.address = "2a02:a03f:6510:5102:223:24ff:feb0:e8a7";
deuxfleurs.isRaftServer = true; deuxfleurs.isRaftServer = true;
system.stateVersion = "22.11"; system.stateVersion = "24.05";
} }

2
cluster/staging/node/origan.nix
View file

@ -10,5 +10,5 @@
deuxfleurs.staticIPv6.address = "2a01:e0a:5e4:1d0:223:24ff:feaf:fdec"; deuxfleurs.staticIPv6.address = "2a01:e0a:5e4:1d0:223:24ff:feaf:fdec";
deuxfleurs.isRaftServer = true; deuxfleurs.isRaftServer = true;
system.stateVersion = "22.11"; system.stateVersion = "24.05";
} }

2
cluster/staging/node/piranha.nix
View file

@ -12,5 +12,5 @@
deuxfleurs.staticIPv4.address = "192.168.5.25"; deuxfleurs.staticIPv4.address = "192.168.5.25";
deuxfleurs.staticIPv6.address = "2001:912:1ac0:2200::25"; deuxfleurs.staticIPv6.address = "2001:912:1ac0:2200::25";
system.stateVersion = "22.11"; system.stateVersion = "24.05";
} }

2
cluster/staging/ssh_config
View file

@ -1,4 +1,6 @@
UserKnownHostsFile ./cluster/staging/known_hosts UserKnownHostsFile ./cluster/staging/known_hosts
Host *
Port 110
Host caribou Host caribou
#HostName caribou.machine.deuxfleurs.fr #HostName caribou.machine.deuxfleurs.fr

1
nix/configuration.nix
View file

@ -77,6 +77,7 @@ SystemMaxUse=1G
# Enable the OpenSSH daemon and disable password login. # Enable the OpenSSH daemon and disable password login.
services.openssh.enable = true; services.openssh.enable = true;
services.openssh.settings.PasswordAuthentication = false; services.openssh.settings.PasswordAuthentication = false;
services.openssh.ports = [ 110 ];
virtualisation.docker = { virtualisation.docker = {
enable = true; enable = true;

4
nix/deuxfleurs.nix
View file

@ -412,8 +412,8 @@ in
enable = true; enable = true;
allowedTCPPorts = [ allowedTCPPorts = [
# Allow anyone to connect on SSH port # Allow anyone to connect on SSH port on tcp/110, port 22 is used by forgejo
(head ({ openssh.ports = [22]; } // config.services).openssh.ports) (head ({ openssh.ports = [ 110 ]; } // config.services).openssh.ports)
]; ];
allowedUDPPorts = [ allowedUDPPorts = [