TheWanderingCrow/CrOS
1
0
Fork 0
mirror of https://github.com/TheWanderingCrow/CrOS.git synced 2026-01-10 17:34:05 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

documentation and no fail2ban

Browse source
This commit is contained in:
TheWanderingCrow 2025-10-22 13:51:14 -04:00
parent e98e21749c
commit 8560beb505
3 changed files with 19 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
hosts/common/core/ssh.nix
View file

@ -31,5 +31,5 @@
};
};
services.fail2ban.enable = lib.mkDefault true; # This comes with an SSH jail preconfigured, expanded fail2ban can be found in modules/services
#services.fail2ban.enable = lib.mkDefault true; # This comes with an SSH jail preconfigured, expanded fail2ban can be found in modules/services
}

6
modules/services/forgejo/default.nix Normal file
View file

@ -0,0 +1,6 @@
{
services.forgejo = {
enable = true;
lfs.enable = true;
};
}

12
nixos-bootstrap/README.md
View file

@ -1,3 +1,15 @@
# Bootstrap ISO for NixOS
From this subdirectory directory, run `just iso` to generate the ISO file
## Typical installation flow
1. Flash iso with `sudo dd if=install.iso of=<usb drive> status=progress`
2. Boot image on install host
3. Connect to network via Ethernet or `nmcli`
4. From a donor machine,
`nixos-anywwhere -i <path to install private key> --flake .#<machine> nixos@<ip>`
5. There is a bit of a snag here, but the current protocol is to connect to
ethernet and SSH in using the installer key in order to setup SOPS, this
section will be amended when we figure this out
6. Connect new host to ethernet and SSH in