config files

This commit is contained in:
zdzr0bmq 2023-12-08 03:08:30 +00:00
commit fb1ec4fe36
3 changed files with 71 additions and 0 deletions

32
configuration.nix Normal file
View File

@ -0,0 +1,32 @@
{ pkgs, config, ... }: {
imports = [
./hardware-configuration.nix
./tor.nix
];
boot.loader.grub.configurationLimit = 5;
boot.tmp.cleanOnBoot = true;
zramSwap.enable = true;
networking.hostName = "apple";
# networking.domain = "";
services.openssh.settings.PermitRootLogin = "prohibit-password";
services.openssh.enable = true;
users.users.root.openssh.authorizedKeys.keys = [''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDkt+yJSrXhJedWxxR3ISwByyXU0tXyhJlLwIS5vL0KO''
''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPj0rhpWRvdmeVd1uXCLGC+797Nmouvsb9jvRT8y85FS''
''ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCacdoWLah4ZJCVtxO7d3ZvZhELUSlyC1FvNhpNwIgX3CssR5FEPuwVy2dTfxR0AWQmhfdX6fOOgIf6OWAqBOgxSzLPrmm9+kcrmmk+2UgGNDAiIBNPY5SGxXrevTdgbnYUF/67wMLMjk7kCzOfuPFTOmMuLwUuegKezkvPNeIuv431yAoXkLtdXZNEJgBwdc5CYsp3JleNfX2bNulcCuvnisfk0YtrtTdqkKKtauzGn34ZiUmtzTSQNPEPPtyv3zX/+CqpYKxcnZzeCJtoWUbYfPuqhPQc4Iza5WQ3ooaXLSQtIzmp89Sv9Odl7YUwl2QsPZLAxihnnAl0i9bNGQ5H''
''ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDunf9/Bf1N4T1r9qehZG99u08H+5AKGl/o91QaQW2d8BF6oxH+mlRcA3NzZVWmhSvuEbYaPepzyXQ/gjPLIXDTUGFkCRTSS+zz3MV8FlEkrpMU0mCLIxZiN+ygPw9qFXItvkVAlMKP5gfNiOZGfizigVcJPzhyDnPUFrWfzDF2iWHAEypVGeqqaSSPemQ0N0CLjm0ksQoMrZvMm8s6z/4eBHKJyLJrKeRwLrqHQHKgKB4NOc60guBje5rTlCdDtmoTvg3zE9PEGmDFO+mfwHl4Io1Ti/gePZsycT9LJCpgCjCPKd9W/7SNZQyy51RTj1qW8zTcuWuMoN8riLf/bZTZ''
];
environment.systemPackages = with pkgs; [
vim
dig
whois
traceroute
fmt
git
];
system.stateVersion = "23.11";
}

View File

@ -0,0 +1,9 @@
{ modulesPath, ... }:
{
imports = [ (modulesPath + "/profiles/qemu-guest.nix") ];
boot.loader.grub.device = "/dev/sda";
boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "xen_blkfront" "vmw_pvscsi" ];
boot.initrd.kernelModules = [ "nvme" ];
fileSystems."/" = { device = "/dev/sda1"; fsType = "ext4"; };
}

30
tor.nix Normal file
View File

@ -0,0 +1,30 @@
{
config,
pkgs,
...
}:
{
services.tor = {
enable = true;
openFirewall = true;
relay = {
enable = true;
role = "relay";
};
settings = {
# Address = "167.235.61.89";
Address = "fe80::9400:2ff:fe9c:684";
ORPort = 9001;
ControlPort = 9059;
AddressDisableIPv6 = false;
Nickname = "apple";
ContactInfo = "zdzr0bmq@duck.com";
AccountingStart = "month 1 0:00";
AccountingMax = "20 TBytes";
RelayBandwidthRate = "7 MBytes";
RelayBandwidthBurst = "10 MBytes"; # allow higher bursts but maintain average
MaxAdvertisedBandwidth = "5 MBytes";
};
};
}