summaryrefslogtreecommitdiff
path: root/modules/software/access
diff options
context:
space:
mode:
authorFuwn <[email protected]>2024-09-20 05:36:20 -0700
committerFuwn <[email protected]>2024-09-20 05:36:20 -0700
commitd9747c64b038943253eaafdc59a49d5face46dab (patch)
treeb452d15a7f20e9f4bb70ec9f9040137bec1072f8 /modules/software/access
parenthimeji: move containers over from seti (diff)
downloadnixos-config-d9747c64b038943253eaafdc59a49d5face46dab.tar.xz
nixos-config-d9747c64b038943253eaafdc59a49d5face46dab.zip
modules: server and core modules
Diffstat (limited to 'modules/software/access')
-rw-r--r--modules/software/access/default.nix7
-rw-r--r--modules/software/access/gnupg.nix18
-rw-r--r--modules/software/access/mosh.nix6
-rw-r--r--modules/software/access/ssh.nix39
4 files changed, 0 insertions, 70 deletions
diff --git a/modules/software/access/default.nix b/modules/software/access/default.nix
deleted file mode 100644
index 7db7629..0000000
--- a/modules/software/access/default.nix
+++ /dev/null
@@ -1,7 +0,0 @@
-{
- imports = [
- ./gnupg.nix
- ./mosh.nix
- ./ssh.nix
- ];
-}
diff --git a/modules/software/access/gnupg.nix b/modules/software/access/gnupg.nix
deleted file mode 100644
index e60da30..0000000
--- a/modules/software/access/gnupg.nix
+++ /dev/null
@@ -1,18 +0,0 @@
-{ pkgs, ... }:
-{
- programs.gnupg.agent = {
- enable = true;
- enableSSHSupport = true;
- pinentryPackage = pkgs.pinentry-curses;
- enableExtraSocket = true;
- enableBrowserSocket = true;
-
- settings = {
- enable-ssh-support = "";
- ttyname = "$GPG_TTY";
- default-cache-ttl = 34560000; # 60
- max-cache-ttl = 34560000; # 120
- allow-loopback-pinentry = "";
- };
- };
-}
diff --git a/modules/software/access/mosh.nix b/modules/software/access/mosh.nix
deleted file mode 100644
index c9af5bf..0000000
--- a/modules/software/access/mosh.nix
+++ /dev/null
@@ -1,6 +0,0 @@
-{
- programs.mosh = {
- enable = true;
- openFirewall = false;
- };
-}
diff --git a/modules/software/access/ssh.nix b/modules/software/access/ssh.nix
deleted file mode 100644
index 665532f..0000000
--- a/modules/software/access/ssh.nix
+++ /dev/null
@@ -1,39 +0,0 @@
-{ lib, config, ... }:
-{
- programs.ssh.startAgent = false;
- security.pam.sshAgentAuth.enable = true;
-
- services = {
- fail2ban.jails.sshd.settings = {
- enabled = true;
- filter = "sshd[mode=aggressive]";
- port = lib.strings.concatStringsSep "," (map toString config.services.openssh.ports);
- };
-
- openssh = {
- enable = true;
- ports = [ 22 ];
- openFirewall = false;
-
- settings = {
- StreamLocalBindUnlink = "yes";
- GatewayPorts = "clientspecified";
-
- KexAlgorithms = [
- "curve25519-sha256"
- "diffie-hellman-group16-sha512"
- "diffie-hellman-group18-sha512"
- "diffie-hellman-group-exchange-sha256"
- ];
-
- Macs = [
- ];
- };
- };
- };
-}