diff options
| author | Jakub Stachurski <j.stachurski@student.utwente.nl> | 2025-11-08 19:21:05 +0100 |
|---|---|---|
| committer | Jakub Stachurski <j.stachurski@student.utwente.nl> | 2025-11-08 19:29:27 +0100 |
| commit | 0c9b217d36da3e29f23ece44b034fa98322daf28 (patch) | |
| tree | 0ffeef2c9bb55439cba436bd08e1dfa620bd9c97 /hosts | |
| parent | 72a532244594a370f597babf700fb013123d8c17 (diff) | |
Remote build support fully modularized
Diffstat (limited to 'hosts')
| -rw-r--r-- | hosts/apocalypse/default.nix | 11 | ||||
| -rw-r--r-- | hosts/apocalypse/firewall.nix | 4 |
2 files changed, 12 insertions, 3 deletions
diff --git a/hosts/apocalypse/default.nix b/hosts/apocalypse/default.nix index c4bffbf..eb9d14c 100644 --- a/hosts/apocalypse/default.nix +++ b/hosts/apocalypse/default.nix @@ -6,6 +6,9 @@ ./backup.nix ./firewall.nix ]; + + ## TODO REMOVE LATER TO PREVENT ELI FROM BUILDING REMOTELY + boot.binfmt.emulatedSystems = ["aarch64-linux"]; ## Addons for this system addons = { @@ -19,6 +22,12 @@ vpn.mullvad.enable = true; vpn.eduvpn.enable = true; gpg.enable = true; + + remote_builder = { + enable = true; + allowedKeyFiles = [../../secrets/eli.pub]; + openFirewall = true; + }; }; boot.loader.grub = { @@ -83,7 +92,7 @@ services.fwupd.enable = true; services.openssh = { - enable = false; + enable = true; ports = [22]; openFirewall = false; allowSFTP = false; diff --git a/hosts/apocalypse/firewall.nix b/hosts/apocalypse/firewall.nix index 26097af..8cf3e61 100644 --- a/hosts/apocalypse/firewall.nix +++ b/hosts/apocalypse/firewall.nix @@ -33,9 +33,9 @@ let ]; in { - networking.nftables.enable = false; + networking.nftables.enable = true; networking.firewall = { - enable = false; + enable = true; checkReversePath = false; allowedTCPPorts = baseTCP; allowedUDPPorts = baseUDP; |