security: remove hexchen

This commit is contained in:
schweby 2021-03-12 23:53:51 +01:00
parent db51a3adde
commit bab826b1c7
3 changed files with 38 additions and 38 deletions

View file

@ -1,9 +1,9 @@
{ config, pkgs, lib, ... }:
{
imports = [
./hexchen.nix
];
# imports = [
# ./hexchen.nix
# ];
home-manager.useGlobalPkgs = true;
@ -13,11 +13,11 @@
};
# all the actual config is imported from hexchen's nixfiles
hexchen = {
uid = lib.mkForce 1000;
isNormalUser = true;
extraGroups = [ "wheel" ];
};
# hexchen = {
# uid = lib.mkForce 1000;
# isNormalUser = true;
# extraGroups = [ "wheel" ];
# };
stuebinm = {
uid = 1005;

View file

@ -95,27 +95,27 @@
boot.kernelPackages = pkgs.linuxPackages;
services.restic.backups.tardis = {
passwordFile = "/etc/restic/system";
s3CredentialsFile = "/etc/restic/system.s3creds";
paths = [
"/data"
"/home"
"/run/florinori"
"/var/lib/containers/codimd/var/lib/codimd"
"/var/lib/containers/codimd/var/backup/postgresql"
"/var/lib/containers/lantifa/var/lib/mediawiki"
"/var/lib/containers/lantifa/var/backup/mysql"
"/var/lib/murmur"
"/var/lib/syncthing"
];
pruneOpts = [
"--keep-daily 7"
"--keep-weekly 5"
"--keep-monthly 12"
];
repository = "b2:tardis-hainich:system";
};
# services.restic.backups.tardis = {
# passwordFile = "/etc/restic/system";
# s3CredentialsFile = "/etc/restic/system.s3creds";
# paths = [
# "/data"
# "/home"
# "/run/florinori"
# "/var/lib/containers/codimd/var/lib/codimd"
# "/var/lib/containers/codimd/var/backup/postgresql"
# "/var/lib/containers/lantifa/var/lib/mediawiki"
# "/var/lib/containers/lantifa/var/backup/mysql"
# "/var/lib/murmur"
# "/var/lib/syncthing"
# ];
# pruneOpts = [
# "--keep-daily 7"
# "--keep-weekly 5"
# "--keep-monthly 12"
# ];
# repository = "b2:tardis-hainich:system";
# };
# This value determines the NixOS release from which the default

View file

@ -24,21 +24,21 @@
id = "72B3T74-NOMJV3X-EVJXTJF-5GGAEZB-ZDKBHXQ-VQNRYEU-YCPA2JP-L6NGAAG";
};
# zauberberg
conway = {
addresses = []; # empty = dynamic
id = "HV7IU2N-Q4W3A7F-BSASR43-OB575SM-47FY2UW-7N5GMFM-PX3LWRN-HXBXMQF";
};
# conway = {
# addresses = []; # empty = dynamic
# id = "HV7IU2N-Q4W3A7F-BSASR43-OB575SM-47FY2UW-7N5GMFM-PX3LWRN-HXBXMQF";
# };
# hexchen
storah = {
addresses = [ "tcp://46.4.62.95:22000" "quic://46.4.62.95:22000" ];
id = "SGHQ2JA-7FJ6CKM-N3I54R4-UOJC5KO-7W22O62-YLTF26F-S7DLZG4-ZLP7HAM";
};
# storah = {
# addresses = [ "tcp://46.4.62.95:22000" "quic://46.4.62.95:22000" ];
# id = "SGHQ2JA-7FJ6CKM-N3I54R4-UOJC5KO-7W22O62-YLTF26F-S7DLZG4-ZLP7HAM";
# };
};
folders = {
"/var/lib/syncthing/hacc" = {
id = "qt2ly-xvvvs";
devices = [ "txsbcct" "octycs" "stuebinm-desktop" "conway" "raphael-laptop" "storah" ];
devices = [ "txsbcct" "octycs" "stuebinm-desktop" "raphael-laptop" ];
type = "receiveonly";
versioning = {
type = "simple";