1 { pkgs, lib, config, ... }:
3 inherit (builtins) readFile;
4 inherit (config.users) users;
9 ../../../sec/machines/mermet/users.nix
16 networking.nftables.ruleset = ''
17 add rule inet filter fw2net tcp dport {25,465} skuid ${users.julm.name} counter accept comment "SMTP"
18 add rule inet filter fw2net tcp dport 43 skuid ${users.julm.name} counter accept comment "Whois"
19 add rule inet filter fw2net tcp dport 563 skuid ${users.julm.name} counter accept comment "NNTPS"
20 add rule inet filter fw2net tcp dport 6697 skuid ${users.julm.name} counter accept comment "IRCS"
21 add rule inet filter fw2net tcp dport 11371 skuid ${users.julm.name} counter accept comment "HKP"
28 openssh.authorizedKeys.keys = [
29 (readFile ../../../sec/ssh/losurdo/root/ssh/id_ed25519.pub)
31 users."julm".openssh.authorizedKeys.keys;