Time flies fast when you try to comprehend Nix.
Go to file
Chinmay D. Pai 12cf2f3701
chore: harden ssh security
* KbdInteractiveAuthentication: disable keyboard interactive-auth, since
  we solely rely on the SSH key for connection.
* PermitEmptyPasswords: disable empty passwords for SSH connection, again,
  since we use SSH keys.
* Protocol: Explicitly set the SSH protocol to 2, even though it is the
  default value.
* MaxAuthTries: Set auth tries to 3. This is to allow up to 3 keys to try
  connection.
* ChallengeResponseAuthentication: We do not require a challenge-response
  setup.
* AllowTcpForwarding: Allows access to locally-running ports without having
  to expose them. Since all auth methods are disabled, we can enable this.

Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
2024-10-05 20:53:47 +05:30
checks/deploy-rs feat: add nixos configuration based on snowfall-lib 2024-09-02 18:31:19 +05:30
homes/x86_64-linux chore: make firefox changes 2024-09-23 11:29:45 +05:30
lib feat: add nixos configuration based on snowfall-lib 2024-09-02 18:31:19 +05:30
modules chore: harden ssh security 2024-10-05 20:53:47 +05:30
overlays/netbird fix: use buildGoModule for netbird overlay 2024-10-05 20:51:41 +05:30
packages/vuetorrent feat: add nix module for arr suite 2024-09-02 19:14:35 +05:30
secrets feat: enable restic backup service for vaultwarden and paperless 2024-09-30 01:17:54 +05:30
systems/x86_64-linux feat: create module for nginx and prepare for fail2ban setup 2024-10-05 20:52:11 +05:30
.gitignore feat: add nixos configuration based on snowfall-lib 2024-09-02 18:31:19 +05:30
data.nix feat: enable restic backup service for vaultwarden and paperless 2024-09-30 01:17:54 +05:30
flake.lock chore: update flake.lock 2024-10-05 20:50:32 +05:30
flake.nix chore: move lanzaboote to system module and remove nixpkgs-immich input 2024-09-30 11:14:57 +05:30