qbit/xin
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

stan: add framework for enabling testing

Browse Source
This commit is contained in:
Aaron Bieber 2023-10-06 06:20:54 -06:00
parent 96ace03090
commit 29c9a08389
No known key found for this signature in database
1 changed files with 15 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
hosts/stan/default.nix
View File

@ -1,9 +1,10 @@
{ config { config
, inputs
, pkgs , pkgs
, ... , ...
}: }:
let let
testingMode = true;
syslogPort = 514;
pubKeys = [ pubKeys = [
"ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBBB/V8N5fqlSGgRCtLJMLDJ8Hd3JcJcY8skI0l+byLNRgQLZfTQRxlZ1yymRs36rXj+ASTnyw5ZDv+q2aXP7Lj0= hosts@secretive.plq.local" "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBBB/V8N5fqlSGgRCtLJMLDJ8Hd3JcJcY8skI0l+byLNRgQLZfTQRxlZ1yymRs36rXj+ASTnyw5ZDv+q2aXP7Lj0= hosts@secretive.plq.local"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO7v+/xS8832iMqJHCWsxUZ8zYoMWoZhjj++e26g1fLT europa" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO7v+/xS8832iMqJHCWsxUZ8zYoMWoZhjj++e26g1fLT europa"
@ -106,11 +107,13 @@ in
networkmanager.enable = true; networkmanager.enable = true;
firewall = { firewall = {
allowedTCPPorts = [ 22 ]; allowedTCPPorts = [ 22 ] ++ (if testingMode then [ ] else [ ]);
checkReversePath = "loose"; checkReversePath = "loose";
allowedUDPPorts = if testingMode then [ syslogPort ] else [ ];
}; };
}; };
i18n.defaultLocale = "en_US.utf8"; i18n.defaultLocale = "en_US.utf8";
kde.enable = true; kde.enable = true;
@ -205,6 +208,16 @@ in
}; };
services = { services = {
rsyslogd = {
enable = testingMode;
defaultConfig = ''
module(load="imudp")
input(type="imudp" port="${toString syslogPort}")
daemon.* -/var/log/daemon
*.warning;*.warn -/var/log/warning
'';
};
printing.enable = true; printing.enable = true;
fwupd.enable = true; fwupd.enable = true;
unifi.enable = false; unifi.enable = false;