workstation | new progs, khal test override, ssh updates, tailscale host override

This commit is contained in:
Don Harper 2023-02-13 13:11:33 -06:00
parent ca31445400
commit 0d46b6d22f

View file

@ -22,10 +22,10 @@ in
networking.enableIPv6 = false; # FIXME this is to test connectivity @ the office via wireguard
networking.networkmanager.wifi.powersave = true;
networking.useDHCP = false;
# networking.extraHosts =
# ''
# 100.75.7.116 harper.tail harper bandwidth.duckland.org bandwidth2.duckland.org cal.duckland.org cloud.duckland.org dash.duckland.org git.duckland.org jelly.duckland.org music.duckland.org photos.duckland.org plex.duckland.org rss.duckland.org smart.duckland.org vault.duckland.org webhook.home.duckland.org
# '';
networking.extraHosts =
''
100.75.7.116 harper.tail harper bandwidth.duckland.org bandwidth2.duckland.org cal.duckland.org cloud.duckland.org dash.duckland.org git.duckland.org jelly.duckland.org music.duckland.org photos.duckland.org plex.duckland.org rss.duckland.org smart.duckland.org vault.duckland.org webhook.home.duckland.org
'';
# Set your time zone.
time.timeZone = "America/Chicago";
@ -90,6 +90,8 @@ in
acpi
aspell
authy
bash-completion
nix-bash-completions
bc
bitwarden
bitwarden-cli
@ -144,6 +146,7 @@ in
mairix
moreutils
mosh
#mpv
mutt
mutt-ics
ncdu
@ -157,6 +160,7 @@ in
pandoc
pasystray
pavucontrol
pkg-config
playerctl
poppler_utils
poweralertd
@ -184,6 +188,7 @@ in
texlive.combined.scheme-medium
tig
timewarrior
thunderbird
tmux
tmux-cssh
tmuxp
@ -219,7 +224,8 @@ in
nixpkgs.overlays = [
(final: prev: { qutebrowser = prev.qutebrowser.override { enableWideVine = true; }; })
(final: prev: { qutebrowser = prev.qutebrowser.override { enableWideVine = true; }; })
(final: super:{ khal = super.khal.overridePythonAttrs (_: { doCheck = false; }); })
];
services.tailscale.enable = true;
@ -255,9 +261,11 @@ in
# Enable the OpenSSH daemon.
services.openssh = {
enable = true;
passwordAuthentication = false;
kbdInteractiveAuthentication = false;
#permitRootLogin = "yes";
settings = {
passwordAuthentication = false;
kbdInteractiveAuthentication = false;
#permitRootLogin = "yes";
};
};
# Open ports in the firewall.