bonnes pratiques selon nixos

ajout pmisc
radx peut imprimer
2016-10-05 00:01:33 +02:00 · 2016-10-05 00:01:33 +02:00 · 2016-09-27 23:08:04 +02:00 · 2016-09-27 23:07:44 +02:00 · 2016-09-20 15:21:48 +02:00 · 2016-09-15 15:52:15 +02:00
6 changed files with 10 additions and 3 deletions
--- a/base/activation-manuelle/nix-serve-client.nix
+++ b/base/activation-manuelle/nix-serve-client.nix
@@ -16,7 +16,7 @@ mkIf cfg.nix-serve-client {
      (mkIf (profiles.isDubronetwork && (! computers.isPedro) && (! computers.isRollo)) "http://nix-cache.dubronetwork.fr:5001")

      (mkIf profiles.isPrunetwork "https://cache.nixos.org/")
-      (mkIf (profiles.isPrunetwork && !profiles.isServer) "http://192.168.1.20:5000")
+      (mkIf (profiles.isPrunetwork && !profiles.isServer) "http://nix-cache.dubronetwork.fr:5001")
    ];
    extraOptions = ''
    connect-timeout = 5
--- a/base/activation-manuelle/users.nix
+++ b/base/activation-manuelle/users.nix
@@ -20,6 +20,7 @@ in {

  users.extraUsers.root = {
    openssh.authorizedKeys.keys = [
+      mbpJPierre03
      radxJPierre03
      radxRoot
      phenomTaeradan
--- a/config-generator.nix
+++ b/config-generator.nix
@@ -181,6 +181,7 @@ in
      };

      r6d.config-generator = {
+        print = true;
        virtualbox = true;
      };
    })
--- a/desktop/desktop.nix
+++ b/desktop/desktop.nix
@@ -1,10 +1,10 @@
-{ config, pkgs, ... }:
+{ config, lib, pkgs, ... }:

 let
  cfg = config.r6d.config-generator;
  computers = config.r6d.computers;
  profiles = config.r6d.profiles;
-  mkIf = pkgs.lib.mkIf;
+  mkIf = lib.mkIf;
 in

 {
--- a/public/environment.nix
+++ b/public/environment.nix
@@ -14,6 +14,9 @@ in
  # The NixOS release to be compatible with for stateful data such as databases.
  system.stateVersion = "16.03";

+  #  copies the NixOS configuration file (usually /etc/nixos/configuration.nix) and links it from the resulting system (getting to /run/current-system/configuration.nix)
+  system.copySystemConfiguration = true;
+
  # On autorise les paquets non-libres
  nixpkgs.config.allowUnfree = true;

@@ -36,6 +39,7 @@ in
      p7zip         # compression de fichier
      parted        # partitionnement de disque
      pciutils
+      psmisc        # fournis les utilitaires comme killall, fuser, pstree
      python        # python -- python -m SimpleHTTPServer 8000
      python34Packages.glances # monitoring
      pwgen         # générateur de mot de passe
--- a/public/service-ssh.nix
+++ b/public/service-ssh.nix
@@ -14,6 +14,7 @@ mkIf true {
  services.openssh = {
    enable = true;
    # https://wiki.mozilla.org/Security/Guidelines/OpenSSH#Modern_.28OpenSSH_6.7.2B.29
+    # http://www.cyberciti.biz/tips/linux-unix-bsd-openssh-server-best-practices.html
    extraConfig = ''
      KexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256
      Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
Author	SHA1	Message	Date
Yves Dubromelle	d65ee1bd2c	bonnes pratiques selon nixos	2016-10-05 00:01:33 +02:00
Yves Dubromelle	dce7b12a33	ajout pmisc	2016-10-05 00:01:33 +02:00
Jean-Pierre PRUNARET	826595cb6c	radx peut imprimer	2016-09-27 23:08:04 +02:00
Jean-Pierre PRUNARET	b633d3c794	les machines @home peuvent utiliser le cache sur monstre	2016-09-27 23:07:44 +02:00
Jean-Pierre PRUNARET	5444be4fd2	copie de configuration.nix par nix dans l'environement courant	2016-09-20 15:21:48 +02:00
Jean-Pierre PRUNARET	9b4a4f1b67	ssh: ajout lien best practices	2016-09-15 15:52:15 +02:00
Jean-Pierre PRUNARET	b622554b42	ajout clef mbp pour root (car radx n'est toujours pas en route)	2016-09-15 12:08:25 +02:00