hardcoded IPv6, added nyx package, configured relay bandwith - needs to be monitored

This commit is contained in:
zdzr0bmq 2023-12-31 09:51:44 +00:00
parent 43ed25b345
commit d81eddac8d
3 changed files with 26 additions and 12 deletions

View File

@ -9,13 +9,24 @@
zramSwap.enable = true;
networking.hostName = "apple";
networking.domain = "";
networking = {
interfaces = {
ens3.ipv6.addresses = [{
address = "2a01:4f8:1c1e:95be::1";
prefixLength = 64;
}];
};
defaultGateway6 = {
address = "fe80::1";
interface = "ens3";
};
};
services.openssh.settings.PermitRootLogin = "no";
services.openssh.enable = true;
users.users.nixuser.openssh.authorizedKeys.keys = [''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDkt+yJSrXhJedWxxR3ISwByyXU0tXyhJlLwIS5vL0KO''
''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPj0rhpWRvdmeVd1uXCLGC+797Nmouvsb9jvRT8y85FS''
''ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCacdoWLah4ZJCVtxO7d3ZvZhELUSlyC1FvNhpNwIgX3CssR5FEPuwVy2dTfxR0AWQmhfdX6fOOgIf6OWAqBOgxSzLPrmm9+kcrmmk+2UgGNDAiIBNPY5SGxXrevTdgbnYUF/67wMLMjk7kCzOfuPFTOmMuLwUuegKezkvPNeIuv431yAoXkLtdXZNEJgBwdc5CYsp3JleNfX2bNulcCuvnisfk0YtrtTdqkKKtauzGn34ZiUmtzTSQNPEPPtyv3zX/+CqpYKxcnZzeCJtoWUbYfPuqhPQc4Iza5WQ3ooaXLSQtIzmp89Sv9Odl7YUwl2QsPZLAxihnnAl0i9bNGQ5H''
''ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDunf9/Bf1N4T1r9qehZG99u08H+5AKGl/o91QaQW2d8BF6oxH+mlRcA3NzZVWmhSvuEbYaPepzyXQ/gjPLIXDTUGFkCRTSS+zz3MV8FlEkrpMU0mCLIxZiN+ygPw9qFXItvkVAlMKP5gfNiOZGfizigVcJPzhyDnPUFrWfzDF2iWHAEypVGeqqaSSPemQ0N0CLjm0ksQoMrZvMm8s6z/4eBHKJyLJrKeRwLrqHQHKgKB4NOc60guBje5rTlCdDtmoTvg3zE9PEGmDFO+mfwHl4Io1Ti/gePZsycT9LJCpgCjCPKd9W/7SNZQyy51RTj1qW8zTcuWuMoN8riLf/bZTZ''
];
''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPj0rhpWRvdmeVd1uXCLGC+797Nmouvsb9jvRT8y85FS''];
services.fail2ban.enable = true;
programs.bash.shellAliases = {
@ -32,7 +43,10 @@
htop
];
};
environment.shellAliases = {
nyx = "sudo -u tor '${pkgs.nyx}/bin/nyx'";
};
environment.systemPackages = with pkgs; [
vim

1
result Symbolic link
View File

@ -0,0 +1 @@
/nix/store/p1v8bngy8cy4lqnndkby49x9wkckb52w-nixos-system-apple-23.05.4112.5a237aecb572

13
tor.nix
View File

@ -12,18 +12,17 @@ services.tor = {
enable = true;
role = "relay";
};
controlSocket.enable = true;
settings = {
Address = "167.235.61.89";
# Address = "fe80::9400:2ff:fe9c:684";
ORPort = 9001;
AddressDisableIPv6 = false;
Nickname = "apple";
ContactInfo = "lyraiue7(at)duck.com";
AccountingStart = "month 1 0:00";
AccountingMax = "20 TBytes";
RelayBandwidthRate = "7 MBytes";
RelayBandwidthBurst = "10 MBytes"; # allow higher bursts but maintain average
MaxAdvertisedBandwidth = "5 MBytes";
AccountingStart = "day 0:00";
AccountingMax = "650 GBytes";
RelayBandwidthRate = "25 MBytes";
RelayBandwidthBurst = "30 MBytes"; # allow higher bursts but maintain average
MaxAdvertisedBandwidth = "25 MBytes";
};
};
}