dec

2025-09-28 14:49:19 -05:00 · 2025-09-28 14:49:19 -05:00 · 77164adab6
commit 77164adab6
parent 3f81a20e87
12 changed files with 412 additions and 485 deletions
--- a/nixos/consensus/hypervisor/configuration.nix
+++ b/nixos/consensus/hypervisor/configuration.nix
@ -0,0 +1,43 @@
+{ name, attrs, ... }:
+{
+  systemd.network = {
+    enable = true;
+    networks."20-lan" = {
+      matchConfig.Type = "ether";
+      networkConfig = {
+        Address = [ (attrs.${name}.ipv4 + attrs.${name}.subnet) ];
+        Gateway = "10.0.0.1";
+        DNS = [ "1.1.1.1" ];
+        IPv6AcceptRA = true;
+        DHCP = "no";
+      };
+    };
+  };
+  services.openssh = {
+    enable = true;
+    settings.PasswordAuthentication = false;
+    settings.KbdInteractiveAuthentication = false;
+  };
+  networking.firewall = {
+    enable = true;
+    allowedTCPPorts = [ 22 ];
+    allowedUDPPorts = [ ];
+    logRefusedConnections = true;
+  };
+  users.users = {
+    root = {
+      openssh.authorizedKeys.keys = [
+        ''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIItTJm2iu/5xacOoh4/JAvMtHE62duDlVVXpvVP+uQMR root@htz''
+        ''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILU2TUxKyGKoZ68IG4hw23RmxVf72u5K9W0StkgTr0b2 e@t14''
+      ];
+    };
+    e = {
+      isNormalUser = true;
+      extraGroups = [ "wheel" ];
+      openssh.authorizedKeys.keys = [
+        ''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIItTJm2iu/5xacOoh4/JAvMtHE62duDlVVXpvVP+uQMR root@htz''
+        ''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILU2TUxKyGKoZ68IG4hw23RmxVf72u5K9W0StkgTr0b2 e@t14''
+      ];
+    };
+  };
+}