Attempting to migrate off digga...

2022-12-06 17:09:27 +10:00
parent 0051488eb1
commit f5a0ad9ba9
203 changed files with 575 additions and 7302 deletions
@@ -0,0 +1,22 @@
+{ config, ... }:
+{
+  services.openssh = {
+    enable = true;
+    passwordAuthentication = false;
+    permitRootLogin = "no";
+  };
+  networking.firewall.allowedTCPPorts = [ 80 443 22 ]; # ssh and website
+  security.sudo.wheelNeedsPassword = false; # needed for deploy-rs
+
+  security.acme.defaults.email = "anish+acme@lakhwara.com";
+  security.acme.acceptTerms = true;
+
+  services.fail2ban = {
+    enable = true;
+    maxretry = 5;
+    ignoreIP = [
+      "127.0.0.0/8"
+      "10.0.0.0/8"
+    ];
+  };
+}