small improvements

rafaelsgirao · Jul 8, 2024 · 7c8cd61 · 7c8cd61
1 parent d81204e
commit 7c8cd61
Show file tree

Hide file tree

Showing 4 changed files with 5 additions and 3 deletions.
diff --git a/hosts/spy/machine.nix b/hosts/spy/machine.nix
@@ -55,7 +55,7 @@ in
 
   rg = {
     ip = "192.168.10.6";
-    ipv4 = "192.168.1.80";
+    ipv4 = "192.168.1.50";
     machineId = "42ef768cc806409b923c6044269f9902";
     machineType = "intel";
     class = "server";
@@ -184,7 +184,7 @@ in
       useACMEHost = "rafael.ovh";
       extraConfig = ''
         encode zstd gzip
-        reverse_proxy http://192.168.1.1:80
+        reverse_proxy http://192.168.1.254:80
       '';
     };
     "cloud.${fqdn}" = {

diff --git a/modules/core/default.nix b/modules/core/default.nix
@@ -90,7 +90,6 @@ in
   networking = {
     inherit (config.rg) domain;
     usePredictableInterfaceNames = false;
-    interfaces.eth0.useDHCP = lib.mkDefault true;
     firewall = {
       enable = true;
       allowedTCPPorts = [
@@ -119,6 +118,7 @@ in
   environment.pathsToLink = [ "/libexec" ];
 
   users.mutableUsers = false;
+  users.defaultUserShell = pkgs.fish;
 
   users.users.rg = {
     uid = 1000;

diff --git a/modules/sshguard.nix b/modules/sshguard.nix
@@ -2,5 +2,7 @@ _: {
   services.sshguard = {
     enable = true;
     whitelist = [ "192.168.10.0/24" ];
+    blacklist_file = "/pst/var/lib/sshguard/blacklist.db";
+
   };
 }
diff --git a/secrets/SSH-config.age b/secrets/SSH-config.age