diff options
| author | Profpatsch <mail@profpatsch.de> | 2018-01-08 15:55:26 +0100 |
|---|---|---|
| committer | Profpatsch <mail@profpatsch.de> | 2018-02-09 01:22:40 +0100 |
| commit | abb434dd927e07bc8e04fbf064273f5a667ff150 (patch) | |
| tree | a9f46a4c626eb194f764670254f63cffb89e0fe0 /machines/profpatsch | |
| parent | 9545e1e107961929706dfc656212838ac383f657 (diff) | |
machines/haku: remove unused services/attack vectors
Diffstat (limited to 'machines/profpatsch')
| -rw-r--r-- | machines/profpatsch/haku.nix | 40 |
1 files changed, 11 insertions, 29 deletions
diff --git a/machines/profpatsch/haku.nix b/machines/profpatsch/haku.nix index 8233fa79..756a60b1 100644 --- a/machines/profpatsch/haku.nix +++ b/machines/profpatsch/haku.nix @@ -49,13 +49,9 @@ in "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtfWeIH7YZpWUUOZ3oC5FB2/J+P3scxm29gUQdVij/K0TuxW1yN/HtcvrO1mwSshS6sNZ2N6/Kb6+kuGyx1mEnaFt87K5ucxC7TNqiURh4eeZE1xX7B5Ob8TVegrBxoe+vcfaoyxn7sUzgF719H0aYC7PP6p3AIbhq3hRLcvY26u9/gZ39H79A71wCunauvpcnpb+rqyJMN6m2YoeOcoloe7wUDI8Xw5dUetHpNKn9k1vzS16CdwP4pAKI8aBtdNK7ZojVMe9LfBG8HHPr9K+cwcaxQuXkFBJzrfrtBCfQwrgWppsu/W/kGBs1ybku2bOFI5UXJBnsraXQqr1NLIfL phj@phj-X220" ]; }; - stallmanbot = { - isSystemUser = true; - useDefaultShell = true; - }; }; - systemd.services.warpspeed = + systemd.services.warpspeed = let user = config.users.users.rtorrent; in { description = "internally served public files (see nginx)"; @@ -78,36 +74,22 @@ in }; }; - services.mlmmj = { - enable = true; - listDomain = "cz.profpatsch.de"; - mailLists = [ "worship" "test" ]; - }; - services.postfix = { - # mostly configured by mlmmj - hostname = "cz.profpatsch.de"; - postmasterAlias = "mail@profpatsch.de"; - }; - - services.searx = { - enable = true; - package = myPkgs.searx; - }; - - services.openvpn.servers.hakuserver = { - config = '' - dev tun - ifconfig 10.20.30.40 10.20.30.41 - secret /root/static-vpn.key - ''; - }; + # services.mlmmj = { + # enable = true; + # listDomain = "cz.profpatsch.de"; + # mailLists = [ "worship" "test" ]; + # }; + # services.postfix = { + # # mostly configured by mlmmj + # hostname = "cz.profpatsch.de"; + # postmasterAlias = "mail@profpatsch.de"; + # }; networking = { hostName = "haku"; firewall = { allowedTCPPorts = [ 80 443 - 8888 # tmp searx port ]; allowedTCPPortRanges = # rtorrent |