Compare commits

...

5 Commits

5 changed files with 21 additions and 11 deletions

View File

@ -11,7 +11,7 @@
forceLocalDataSSL = true; forceLocalDataSSL = true;
userlistDeny = false; userlistDeny = false;
localUsers = true; localUsers = true;
userlist = ["claire" "manu"]; userlist = ["claire" "manu" "lakeu" "fusil" "stryxion"];
rsaCertFile = "/var/vsftpd/vsftpd.pem"; rsaCertFile = "/var/vsftpd/vsftpd.pem";
extraConfig = '' extraConfig = ''
pasv_min_port=64000 pasv_min_port=64000
@ -32,6 +32,24 @@
hashedPassword = "$6$YGNIdGEclo$JcUotBS6hqlpENjjUeYhDjtrwxu10oARF4Nq4tEo072Sumr3Rl/w3ZXSHI5/3RxfvUMmJ4ulUVctBLhwrqP.g0"; hashedPassword = "$6$YGNIdGEclo$JcUotBS6hqlpENjjUeYhDjtrwxu10oARF4Nq4tEo072Sumr3Rl/w3ZXSHI5/3RxfvUMmJ4ulUVctBLhwrqP.g0";
description = "Emmanuel ZENNER"; description = "Emmanuel ZENNER";
}; };
lakeu = {
isNormalUser = true;
hashedPassword = "$6$Y7Rohw3xMzCGp$DVTZVAQccBeM/iVUH1IOgkXUohWjTvujNuvekezWS3vdEm1BUxkYZqH2ECHj5DN.ZiGFjJHhBh7PpbE8GDxSz.";
description = "Lakeu";
};
fusil = {
isNormalUser = true;
hashedPassword = "$6$HndxtEEO1w4$FC6rXf1h98tyt0Ay670iz1jbaNj8vKwH8BHYf3vsbSennA63r94x67I5KxmVOxOIEbIf55zIWFsM8GpyJ9K6Y/";
description = "Fusil";
};
stryxion = {
isNormalUser = true;
hashedPassword = "$6$KZKwBLI6yGuvFg2Q$VCfSnhAacgxlxybTyuCDyNQ2InM8ppG3aa3Bw176TiNAX8tHWUpKesfI9YfcCoGAi1zSzA7b6uC8BmmfrQwg1.";
description = "Stryxion";
};
}; };
}; };
bindMounts = { bindMounts = {

View File

@ -36,13 +36,11 @@ let
http-response set-header Strict-Transport-Security max-age=15768000 http-response set-header Strict-Transport-Security max-age=15768000
use_backend letsencrypt-backend if letsencrypt-acl use_backend letsencrypt-backend if letsencrypt-acl
use_backend haproxy_stats if haproxy-acl use_backend haproxy_stats if haproxy-acl
${concatStrings ( ${concatStrings (
mapAttrsToList (name: value: mapAttrsToList (name: value:
" acl ${name}-acl hdr(host) -i ${name}\n" " acl ${name}-acl hdr(host) -i ${name}\n"
+ " use_backend ${name}-backend if ${name}-acl\n" + " use_backend ${name}-backend if ${name}-acl\n"
) cfg.services)} ) cfg.services)}
backend letsencrypt-backend backend letsencrypt-backend
mode http mode http
server letsencrypt 127.0.0.1:${toString nginx_port} server letsencrypt 127.0.0.1:${toString nginx_port}
@ -52,7 +50,6 @@ let
stats hide-version stats hide-version
acl AuthOK_LOUTRE http_auth(LOUTRE) acl AuthOK_LOUTRE http_auth(LOUTRE)
http-request auth realm LOUTRE if !AuthOK_LOUTRE http-request auth realm LOUTRE if !AuthOK_LOUTRE
${concatStrings ( ${concatStrings (
mapAttrsToList (name: value: mapAttrsToList (name: value:
'' ''
@ -78,7 +75,6 @@ let
) else "")} ) else "")}
'' ''
) cfg.services)} ) cfg.services)}
''; '';
in in
{ {

View File

@ -72,11 +72,6 @@
fsType = "zfs"; fsType = "zfs";
}; };
fileSystems."/var/lib/emby/ProgramData-Server" =
{ device = "loutrepool/var/emby";
fsType = "zfs";
};
fileSystems."/var/lib/syncthing" = fileSystems."/var/lib/syncthing" =
{ device = "loutrepool/var/syncthing"; { device = "loutrepool/var/syncthing";
fsType = "zfs"; fsType = "zfs";

View File

@ -33,7 +33,7 @@ let
login_mail_alert = pkgs.writeShellScriptBin "mail_alert.sh" '' login_mail_alert = pkgs.writeShellScriptBin "mail_alert.sh" ''
if [ "$PAM_TYPE" != "close_session" ]; then if [ "$PAM_TYPE" != "close_session" ]; then
${sendMail "paul@nyanlout.re" "SSH Login: $PAM_USER from $PAM_RHOST" "`env`"} ${sendMail "paul@nyanlout.re" "SSH Login: $PAM_USER from $PAM_RHOST" "`env`"}/bin/mail.sh
fi fi
''; '';

View File

@ -16,6 +16,7 @@
# Gestionnaires de version # Gestionnaires de version
gitFull gitFull
tig tig
gitAndTools.hub
# Gestion de paquets # Gestion de paquets
nix-prefetch-scripts nix-prefetch-scripts