1 { inputs, pkgs, lib, config, ... }:
3 inherit (builtins) readFile;
4 inherit (config.users) users;
11 nix.settings.trusted-users = [
19 openssh.authorizedKeys.keys =
20 users."julm".openssh.authorizedKeys.keys ++
21 [ (readFile (inputs.secrets + "/hosts/losurdo/ssh/root.ssh-ed25519.pub")) ];
31 services.sanoid.datasets."rpool/home/julm/mail" = {
32 use_template = [ "snap" ];
33 # Not until https://github.com/jimsalterjrs/sanoid/pull/342#issuecomment-980494511 has been fixed
37 services.sanoid.datasets."rpool/home/julm/log" = {
38 use_template = [ "snap" ];
39 # Not until https://github.com/jimsalterjrs/sanoid/pull/342#issuecomment-980494511 has been fixed
44 services.sanoid.datasets."rpool/backup/losurdo/home/julm/work" = {
45 use_template = [ "prune" ];
48 networking.nftables.ruleset = ''
49 add rule inet filter fw2net tcp dport {25,465} skuid ${users.julm.name} counter accept comment "SMTP"
50 add rule inet filter fw2net tcp dport 43 skuid ${users.julm.name} counter accept comment "Whois"
51 add rule inet filter fw2net tcp dport 563 skuid ${users.julm.name} counter accept comment "NNTPS"
52 add rule inet filter fw2net tcp dport 6697 skuid ${users.julm.name} counter accept comment "IRCS"
53 add rule inet filter fw2net tcp dport 11371 skuid ${users.julm.name} counter accept comment "HKP"