This commit is contained in:
2025-08-21 12:02:16 +03:00
parent c4a3f6b6a7
commit 23675e3ba9
3 changed files with 7 additions and 17 deletions

View File

@@ -15,6 +15,7 @@
environment.systemPackages = with pkgs; [
fastfetch
hyfetch
pm2
];
users.users.ocbwoy3 = {

View File

@@ -9,23 +9,11 @@
# lib.mkIf (isOCbwoy3 == true)
services.cloudflared = {
enable = true;
certificateFile = "/private/cloudflared.pem";
tunnels = {
"selfhost" = {
# 2f83f704-e9f7-49fb-a6c4-d4a8f85d87e4
default = "http_status:404";
credentialsFile = "/private/cloudflared/selfhost.json";
ingress = {
"api.ocbwoy3.dev" = {
service = "http://127.0.0.1:8080";
};
"remx-staging.darktru.win" = {
service = "http://127.0.0.1:3000";
};
"pds.darktru.win" = {
service = "http://127.0.0.1:80";
};
};
};
};
};

View File

@@ -32,11 +32,12 @@
services.openssh = {
enable = true;
ports = [ 22 ];
settings = {
KexAlgorithms = [ "curve25519-sha256@libssh.org" ];
Ciphers = [ "chacha20-poly1305@openssh.com" ];
Macs = [ "hmac-sha2-512-etm@openssh.com" ];
};
# fucks up ssh connections from iphone if you enable this
# settings = {
# KexAlgorithms = [ "curve25519-sha256@libssh.org" ];
# Ciphers = [ "chacha20-poly1305@openssh.com" ];
# Macs = [ "hmac-sha2-512-etm@openssh.com" ];
# };
};
security.sudo.enable = true;