summaryrefslogtreecommitdiff
path: root/hosts
diff options
context:
space:
mode:
Diffstat (limited to 'hosts')
-rw-r--r--hosts/demiurge/default.nix20
1 files changed, 12 insertions, 8 deletions
diff --git a/hosts/demiurge/default.nix b/hosts/demiurge/default.nix
index 9a4223c..236c726 100644
--- a/hosts/demiurge/default.nix
+++ b/hosts/demiurge/default.nix
@@ -262,7 +262,7 @@
262 interface = [ 262 interface = [
263 "127.0.0.1" 263 "127.0.0.1"
264 "100.64.0.2" 264 "100.64.0.2"
265 "fd00:b0ba:cafe:babe::2" 265 #"fd00:b0ba:cafe:babe::2"
266 "::1" 266 "::1"
267 ]; 267 ];
268 access-control = [ 268 access-control = [
@@ -395,8 +395,9 @@
395 enable = true; 395 enable = true;
396 396
397 defaultListenAddresses = [ 397 defaultListenAddresses = [
398 "10.0.13.2" 398 "100.64.0.2"
399 "fd00:b0ba:cafe:babe::2" 399 #"10.0.13.2"
400 #"fd00:b0ba:cafe:babe::2"
400 ]; 401 ];
401 402
402 recommendedGzipSettings = true; 403 recommendedGzipSettings = true;
@@ -452,9 +453,15 @@
452 openssh = { 453 openssh = {
453 enable = true; 454 enable = true;
454 455
456 listenAddresses = [
457 { addr = "127.0.0.1"; port = 22; }
458 { addr = "192.168.1.2"; port = 22; }
459 { addr = "100.64.0.2"; port = 22; }
460 ];
461
455 settings = { 462 settings = {
456 KbdInteractiveAuthentication = false; 463 KbdInteractiveAuthentication = false;
457 PasswordAuthentication = false; 464 PasswordAuthentication = true;
458 PermitRootLogin = "no"; 465 PermitRootLogin = "no";
459 X11Forwarding = true; 466 X11Forwarding = true;
460 }; 467 };
@@ -997,10 +1004,7 @@
997 1004
998 # extra systemd stuff 1005 # extra systemd stuff
999 systemd.services = { 1006 systemd.services = {
1000 #nginx = { 1007 nginx.after = [ "tailscaled-autoconnect.service" ];
1001 # after = [ "wireguard-wg1.service" ];
1002 # serviceConfig.Type = lib.mkForce "idle";
1003 #};
1004 }; 1008 };
1005 1009
1006 # create caches and use mandoc 1010 # create caches and use mandoc