hosts/losurdo/users/julm.nix

   1 { inputs, pkgs, lib, config, hostName, ... }:
   2 let
   3   inherit (config.users) users;
   4 in
   5 {
   6 imports = [
   7   ../../../users/julm.nix
   8 ];
   9
  10 users.users.julm = {
  11   hashedPassword = lib.readFile julm/hashedPassword.clear;
  12   openssh.authorizedKeys.keys = map lib.readFile [
  13     ../../../users/julm/ssh/gnupg.pub
  14     ../../../users/julm/ssh/oignon.pub
  15     ../../../users/julm/ssh/mob.pub
  16     ../../../users/julm/ssh/losurdo.pub
  17   ];
  18   extraGroups = [
  19     "adbusers"
  20     "dialout"
  21     "gpg-agent"
  22     "lp"
  23     "networkmanager"
  24     "scanner"
  25     "tor"
  26     "wheel"
  27   ];
  28 };
  29
  30 nix.settings.trusted-users = [
  31   users."julm".name
  32 ];
  33
  34 services.sanoid.datasets = {
  35   "das1/julm/backup" = {
  36     use_template = [ "prune" ];
  37     recursive = true;
  38   };
  39   "das1/julm/perso" = {
  40     use_template = [ "snap" ];
  41     recursive = true;
  42   };
  43   "das1/julm/public" = {
  44     use_template = [ "snap" ];
  45     recursive = true;
  46   };
  47 };
  48
  49 networking.nftables.ruleset = ''
  50   table inet filter {
  51     chain output-net-julm {
  52       tcp dport {smtp, submissions} counter accept comment "SMTP"
  53       tcp dport nicname counter accept comment "Whois"
  54       tcp dport imaps counter accept comment "IMAPS"
  55       tcp dport ircs-u counter accept comment "IRCS"
  56       tcp dport 2222 counter accept comment "SSH(boot)"
  57       tcp dport xmpp-client counter accept comment "XMPP"
  58       tcp dport hkp counter accept comment "HKP"
  59       tcp dport {9009,9010,9011,9012,9013} counter accept comment "croc"
  60       udp dport 33434-33523 counter accept comment "traceroute"
  61       udp dport 60000-61000 counter accept comment "Mosh"
  62     }
  63     chain output-net {
  64       skuid ${users.julm.name} jump output-net-julm
  65     }
  66   }
  67 '';
  68 }