kylekrein/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

ssh

Browse source
This commit is contained in:
Aleksandr Lebedev 2026-04-25 14:02:27 +02:00
parent 479fc9a47a
commit 46b5006fec
2 changed files with 2 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

4
modules/nixos/users/kylekrein/default.nix
View file

@ -17,9 +17,7 @@ with lib.${namespace}; let
admin = true; admin = true;
extraGroups = ["networkmanager" "touchscreen"]; extraGroups = ["networkmanager" "touchscreen"];
trustedSshKeys = [ trustedSshKeys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFDdxZ5OyGcfD1JwEa4RWw86HWZ2dKFR0syrRckl7EvG kylekrein@kylekrein-homepc" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF1gj+j+09T8n2HjpBod13WGroWn1cLmNUDmQfGVZllM kylekrein@fleetcarrier"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAWDM28XBxm4PFBNOouNWxqVmDj1ulUGEgHsRYoODCDG anaconda"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINYO1JV6qkQM+EW2WY/RxDFihgSKuFHF1hVtzl+F9ye4 kylekrein@anaconda"
]; ];
cfg = config.${namespace}.users.${username}; cfg = config.${namespace}.users.${username};

2
systems/x86_64-linux/stargate/services/fail2ban.nix
View file

@ -8,7 +8,7 @@
"fail2ban/action.d/ntfy.local".text = pkgs.lib.mkDefault (pkgs.lib.mkAfter '' "fail2ban/action.d/ntfy.local".text = pkgs.lib.mkDefault (pkgs.lib.mkAfter ''
[Definition] [Definition]
norestored = true # Needed to avoid receiving a new notification after every restart norestored = true # Needed to avoid receiving a new notification after every restart
#actionban = ${pkgs.coreutils}/bin/echo "<ip> has been banned: <name> jail has banned <ip> from accessing $(hostname) after <failures> attempts of hacking the system." | /run/wrappers/bin/sendmail -i fail2ban@localhost.com actionban = ${pkgs.curl}/bin/curl -H "<ip> has been banned: <name> jail has banned <ip> from accessing $(hostname) after <failures> attempts of hacking the system. https://ntfy.kylekrein.com"
''); '');
# Defines a filter that detects URL probing by reading the Nginx access log # Defines a filter that detects URL probing by reading the Nginx access log
"fail2ban/filter.d/nginx-url-probe.local".text = pkgs.lib.mkDefault (pkgs.lib.mkAfter '' "fail2ban/filter.d/nginx-url-probe.local".text = pkgs.lib.mkDefault (pkgs.lib.mkAfter ''