hardcoded IPv6, added nyx package, configured relay bandwith - needs to be monitored
This commit is contained in:
parent
43ed25b345
commit
d81eddac8d
|
@ -9,13 +9,24 @@
|
|||
zramSwap.enable = true;
|
||||
networking.hostName = "apple";
|
||||
networking.domain = "";
|
||||
|
||||
networking = {
|
||||
interfaces = {
|
||||
ens3.ipv6.addresses = [{
|
||||
address = "2a01:4f8:1c1e:95be::1";
|
||||
prefixLength = 64;
|
||||
}];
|
||||
};
|
||||
defaultGateway6 = {
|
||||
address = "fe80::1";
|
||||
interface = "ens3";
|
||||
};
|
||||
};
|
||||
|
||||
services.openssh.settings.PermitRootLogin = "no";
|
||||
services.openssh.enable = true;
|
||||
users.users.nixuser.openssh.authorizedKeys.keys = [''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDkt+yJSrXhJedWxxR3ISwByyXU0tXyhJlLwIS5vL0KO''
|
||||
''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPj0rhpWRvdmeVd1uXCLGC+797Nmouvsb9jvRT8y85FS''
|
||||
''ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCacdoWLah4ZJCVtxO7d3ZvZhELUSlyC1FvNhpNwIgX3CssR5FEPuwVy2dTfxR0AWQmhfdX6fOOgIf6OWAqBOgxSzLPrmm9+kcrmmk+2UgGNDAiIBNPY5SGxXrevTdgbnYUF/67wMLMjk7kCzOfuPFTOmMuLwUuegKezkvPNeIuv431yAoXkLtdXZNEJgBwdc5CYsp3JleNfX2bNulcCuvnisfk0YtrtTdqkKKtauzGn34ZiUmtzTSQNPEPPtyv3zX/+CqpYKxcnZzeCJtoWUbYfPuqhPQc4Iza5WQ3ooaXLSQtIzmp89Sv9Odl7YUwl2QsPZLAxihnnAl0i9bNGQ5H''
|
||||
''ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDunf9/Bf1N4T1r9qehZG99u08H+5AKGl/o91QaQW2d8BF6oxH+mlRcA3NzZVWmhSvuEbYaPepzyXQ/gjPLIXDTUGFkCRTSS+zz3MV8FlEkrpMU0mCLIxZiN+ygPw9qFXItvkVAlMKP5gfNiOZGfizigVcJPzhyDnPUFrWfzDF2iWHAEypVGeqqaSSPemQ0N0CLjm0ksQoMrZvMm8s6z/4eBHKJyLJrKeRwLrqHQHKgKB4NOc60guBje5rTlCdDtmoTvg3zE9PEGmDFO+mfwHl4Io1Ti/gePZsycT9LJCpgCjCPKd9W/7SNZQyy51RTj1qW8zTcuWuMoN8riLf/bZTZ''
|
||||
];
|
||||
''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPj0rhpWRvdmeVd1uXCLGC+797Nmouvsb9jvRT8y85FS''];
|
||||
services.fail2ban.enable = true;
|
||||
|
||||
programs.bash.shellAliases = {
|
||||
|
@ -32,7 +43,10 @@
|
|||
htop
|
||||
];
|
||||
};
|
||||
|
||||
|
||||
environment.shellAliases = {
|
||||
nyx = "sudo -u tor '${pkgs.nyx}/bin/nyx'";
|
||||
};
|
||||
|
||||
environment.systemPackages = with pkgs; [
|
||||
vim
|
||||
|
|
|
@ -0,0 +1 @@
|
|||
/nix/store/p1v8bngy8cy4lqnndkby49x9wkckb52w-nixos-system-apple-23.05.4112.5a237aecb572
|
13
tor.nix
13
tor.nix
|
@ -12,18 +12,17 @@ services.tor = {
|
|||
enable = true;
|
||||
role = "relay";
|
||||
};
|
||||
controlSocket.enable = true;
|
||||
settings = {
|
||||
Address = "167.235.61.89";
|
||||
# Address = "fe80::9400:2ff:fe9c:684";
|
||||
ORPort = 9001;
|
||||
AddressDisableIPv6 = false;
|
||||
Nickname = "apple";
|
||||
ContactInfo = "lyraiue7(at)duck.com";
|
||||
AccountingStart = "month 1 0:00";
|
||||
AccountingMax = "20 TBytes";
|
||||
RelayBandwidthRate = "7 MBytes";
|
||||
RelayBandwidthBurst = "10 MBytes"; # allow higher bursts but maintain average
|
||||
MaxAdvertisedBandwidth = "5 MBytes";
|
||||
AccountingStart = "day 0:00";
|
||||
AccountingMax = "650 GBytes";
|
||||
RelayBandwidthRate = "25 MBytes";
|
||||
RelayBandwidthBurst = "30 MBytes"; # allow higher bursts but maintain average
|
||||
MaxAdvertisedBandwidth = "25 MBytes";
|
||||
};
|
||||
};
|
||||
}
|
||||
|
|
Loading…
Reference in New Issue