This commit is contained in:
2025-08-21 12:02:16 +03:00
parent c4a3f6b6a7
commit 23675e3ba9
3 changed files with 7 additions and 17 deletions

View File

@@ -15,6 +15,7 @@
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
fastfetch fastfetch
hyfetch hyfetch
pm2
]; ];
users.users.ocbwoy3 = { users.users.ocbwoy3 = {

View File

@@ -9,23 +9,11 @@
# lib.mkIf (isOCbwoy3 == true) # lib.mkIf (isOCbwoy3 == true)
services.cloudflared = { services.cloudflared = {
enable = true; enable = true;
certificateFile = "/private/cloudflared.pem";
tunnels = { tunnels = {
"selfhost" = { "selfhost" = {
# 2f83f704-e9f7-49fb-a6c4-d4a8f85d87e4 # 2f83f704-e9f7-49fb-a6c4-d4a8f85d87e4
default = "http_status:404"; default = "http_status:404";
credentialsFile = "/private/cloudflared/selfhost.json"; credentialsFile = "/private/cloudflared/selfhost.json";
ingress = {
"api.ocbwoy3.dev" = {
service = "http://127.0.0.1:8080";
};
"remx-staging.darktru.win" = {
service = "http://127.0.0.1:3000";
};
"pds.darktru.win" = {
service = "http://127.0.0.1:80";
};
};
}; };
}; };
}; };

View File

@@ -32,11 +32,12 @@
services.openssh = { services.openssh = {
enable = true; enable = true;
ports = [ 22 ]; ports = [ 22 ];
settings = { # fucks up ssh connections from iphone if you enable this
KexAlgorithms = [ "curve25519-sha256@libssh.org" ]; # settings = {
Ciphers = [ "chacha20-poly1305@openssh.com" ]; # KexAlgorithms = [ "curve25519-sha256@libssh.org" ];
Macs = [ "hmac-sha2-512-etm@openssh.com" ]; # Ciphers = [ "chacha20-poly1305@openssh.com" ];
}; # Macs = [ "hmac-sha2-512-etm@openssh.com" ];
# };
}; };
security.sudo.enable = true; security.sudo.enable = true;