add ssh to Drone and force firewall to have no open ports (also fix nano tabs (i did not know it would do this))

This commit is contained in:
wo2wz 2025-08-09 12:18:57 -04:00
parent 496a9ac3bc
commit 37db37e554

View file

@ -4,6 +4,7 @@
imports = [ imports = [
./hardware-configuration.nix ./hardware-configuration.nix
../../common/ssh/server.nix
../../common/boot.nix ../../common/boot.nix
../../common/locales.nix ../../common/locales.nix
../../common/nix.nix ../../common/nix.nix
@ -25,7 +26,15 @@
size = 8192; size = 8192;
}]; }];
networking.hostName = "${hostName}"; networking = {
hostName = "${hostName}";
firewall = lib.mkForce {
allowedTCPPorts = [];
allowedTCPPortRanges = [];
allowedUDPPorts = [];
allowedUDPPortRanges = [];
};
};
environment.defaultPackages = lib.mkForce []; environment.defaultPackages = lib.mkForce [];
@ -121,8 +130,8 @@
zipline = { zipline = {
enable = true; enable = true;
settings = { settings = {
FEATURES_VERSION_CHECKING = "false"; FEATURES_VERSION_CHECKING = "false";
FEATURES_THUMBNAILS_NUM_THREADS = 2; FEATURES_THUMBNAILS_NUM_THREADS = 2;
}; };
environmentFiles = [ "/var/secrets/zipline/secrets.env" ]; environmentFiles = [ "/var/secrets/zipline/secrets.env" ];
}; };