Compare commits
5 Commits
25c24a6c3e
...
a189abf912
Author | SHA1 | Date | |
---|---|---|---|
a189abf912 | |||
e2cf877e6a | |||
5aff716570 | |||
78284f5e60 | |||
612a41ca9b |
@ -11,7 +11,7 @@
|
|||||||
forceLocalDataSSL = true;
|
forceLocalDataSSL = true;
|
||||||
userlistDeny = false;
|
userlistDeny = false;
|
||||||
localUsers = true;
|
localUsers = true;
|
||||||
userlist = ["claire" "manu"];
|
userlist = ["claire" "manu" "lakeu" "fusil" "stryxion"];
|
||||||
rsaCertFile = "/var/vsftpd/vsftpd.pem";
|
rsaCertFile = "/var/vsftpd/vsftpd.pem";
|
||||||
extraConfig = ''
|
extraConfig = ''
|
||||||
pasv_min_port=64000
|
pasv_min_port=64000
|
||||||
@ -32,6 +32,24 @@
|
|||||||
hashedPassword = "$6$YGNIdGEclo$JcUotBS6hqlpENjjUeYhDjtrwxu10oARF4Nq4tEo072Sumr3Rl/w3ZXSHI5/3RxfvUMmJ4ulUVctBLhwrqP.g0";
|
hashedPassword = "$6$YGNIdGEclo$JcUotBS6hqlpENjjUeYhDjtrwxu10oARF4Nq4tEo072Sumr3Rl/w3ZXSHI5/3RxfvUMmJ4ulUVctBLhwrqP.g0";
|
||||||
description = "Emmanuel ZENNER";
|
description = "Emmanuel ZENNER";
|
||||||
};
|
};
|
||||||
|
|
||||||
|
lakeu = {
|
||||||
|
isNormalUser = true;
|
||||||
|
hashedPassword = "$6$Y7Rohw3xMzCGp$DVTZVAQccBeM/iVUH1IOgkXUohWjTvujNuvekezWS3vdEm1BUxkYZqH2ECHj5DN.ZiGFjJHhBh7PpbE8GDxSz.";
|
||||||
|
description = "Lakeu";
|
||||||
|
};
|
||||||
|
|
||||||
|
fusil = {
|
||||||
|
isNormalUser = true;
|
||||||
|
hashedPassword = "$6$HndxtEEO1w4$FC6rXf1h98tyt0Ay670iz1jbaNj8vKwH8BHYf3vsbSennA63r94x67I5KxmVOxOIEbIf55zIWFsM8GpyJ9K6Y/";
|
||||||
|
description = "Fusil";
|
||||||
|
};
|
||||||
|
|
||||||
|
stryxion = {
|
||||||
|
isNormalUser = true;
|
||||||
|
hashedPassword = "$6$KZKwBLI6yGuvFg2Q$VCfSnhAacgxlxybTyuCDyNQ2InM8ppG3aa3Bw176TiNAX8tHWUpKesfI9YfcCoGAi1zSzA7b6uC8BmmfrQwg1.";
|
||||||
|
description = "Stryxion";
|
||||||
|
};
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
bindMounts = {
|
bindMounts = {
|
||||||
|
@ -36,13 +36,11 @@ let
|
|||||||
http-response set-header Strict-Transport-Security max-age=15768000
|
http-response set-header Strict-Transport-Security max-age=15768000
|
||||||
use_backend letsencrypt-backend if letsencrypt-acl
|
use_backend letsencrypt-backend if letsencrypt-acl
|
||||||
use_backend haproxy_stats if haproxy-acl
|
use_backend haproxy_stats if haproxy-acl
|
||||||
|
|
||||||
${concatStrings (
|
${concatStrings (
|
||||||
mapAttrsToList (name: value:
|
mapAttrsToList (name: value:
|
||||||
" acl ${name}-acl hdr(host) -i ${name}\n"
|
" acl ${name}-acl hdr(host) -i ${name}\n"
|
||||||
+ " use_backend ${name}-backend if ${name}-acl\n"
|
+ " use_backend ${name}-backend if ${name}-acl\n"
|
||||||
) cfg.services)}
|
) cfg.services)}
|
||||||
|
|
||||||
backend letsencrypt-backend
|
backend letsencrypt-backend
|
||||||
mode http
|
mode http
|
||||||
server letsencrypt 127.0.0.1:${toString nginx_port}
|
server letsencrypt 127.0.0.1:${toString nginx_port}
|
||||||
@ -52,7 +50,6 @@ let
|
|||||||
stats hide-version
|
stats hide-version
|
||||||
acl AuthOK_LOUTRE http_auth(LOUTRE)
|
acl AuthOK_LOUTRE http_auth(LOUTRE)
|
||||||
http-request auth realm LOUTRE if !AuthOK_LOUTRE
|
http-request auth realm LOUTRE if !AuthOK_LOUTRE
|
||||||
|
|
||||||
${concatStrings (
|
${concatStrings (
|
||||||
mapAttrsToList (name: value:
|
mapAttrsToList (name: value:
|
||||||
''
|
''
|
||||||
@ -78,7 +75,6 @@ let
|
|||||||
) else "")}
|
) else "")}
|
||||||
''
|
''
|
||||||
) cfg.services)}
|
) cfg.services)}
|
||||||
|
|
||||||
'';
|
'';
|
||||||
in
|
in
|
||||||
{
|
{
|
||||||
|
@ -72,11 +72,6 @@
|
|||||||
fsType = "zfs";
|
fsType = "zfs";
|
||||||
};
|
};
|
||||||
|
|
||||||
fileSystems."/var/lib/emby/ProgramData-Server" =
|
|
||||||
{ device = "loutrepool/var/emby";
|
|
||||||
fsType = "zfs";
|
|
||||||
};
|
|
||||||
|
|
||||||
fileSystems."/var/lib/syncthing" =
|
fileSystems."/var/lib/syncthing" =
|
||||||
{ device = "loutrepool/var/syncthing";
|
{ device = "loutrepool/var/syncthing";
|
||||||
fsType = "zfs";
|
fsType = "zfs";
|
||||||
|
@ -33,7 +33,7 @@ let
|
|||||||
|
|
||||||
login_mail_alert = pkgs.writeShellScriptBin "mail_alert.sh" ''
|
login_mail_alert = pkgs.writeShellScriptBin "mail_alert.sh" ''
|
||||||
if [ "$PAM_TYPE" != "close_session" ]; then
|
if [ "$PAM_TYPE" != "close_session" ]; then
|
||||||
${sendMail "paul@nyanlout.re" "SSH Login: $PAM_USER from $PAM_RHOST" "`env`"}
|
${sendMail "paul@nyanlout.re" "SSH Login: $PAM_USER from $PAM_RHOST" "`env`"}/bin/mail.sh
|
||||||
fi
|
fi
|
||||||
'';
|
'';
|
||||||
|
|
||||||
|
@ -16,6 +16,7 @@
|
|||||||
# Gestionnaires de version
|
# Gestionnaires de version
|
||||||
gitFull
|
gitFull
|
||||||
tig
|
tig
|
||||||
|
gitAndTools.hub
|
||||||
|
|
||||||
# Gestion de paquets
|
# Gestion de paquets
|
||||||
nix-prefetch-scripts
|
nix-prefetch-scripts
|
||||||
|
Loading…
Reference in New Issue
Block a user