diff --git a/modules/generic.nix b/modules/generic.nix index f418476..5fba967 100644 --- a/modules/generic.nix +++ b/modules/generic.nix @@ -53,17 +53,17 @@ in security.sudo.wheelNeedsPassword = false; - system.autoUpgrade = { - enable = true; - allowReboot = lib.mkDefault true; - dates = "04:00"; - randomizedDelaySec = "30min"; - }; + #system.autoUpgrade = { + # enable = true; + # allowReboot = lib.mkDefault true; + # dates = "04:00"; + # randomizedDelaySec = "30min"; + #}; services = { openssh = { enable = true; - passwordAuthentication = false; + settings.PasswordAuthentication = false; extraConfig = "ClientAliveInterval 60"; }; @@ -117,12 +117,12 @@ in # due to compability issues #virtualisation.podman.autoPrune.enable = config.virtualisation.podman.enable; - nix.gc = { - automatic = lib.mkDefault true; - options = lib.mkDefault "--delete-older-than 2d"; - }; + #nix.gc = { + # automatic = lib.mkDefault true; + # options = lib.mkDefault "--delete-older-than 2d"; + #}; - boot.cleanTmpDir = true; + boot.tmp.cleanOnBoot = true; imports = [ ./zabbix-agent.nix diff --git a/secrets/secrets.yaml b/secrets/secrets.yaml index f247c3f..fab0ebb 100644 --- a/secrets/secrets.yaml +++ b/secrets/secrets.yaml @@ -18,6 +18,7 @@ ihatemoney: env: ENC[AES256_GCM,data:tvrell8MY0mIYJgmbpxMROlXSYk8M8mueViVDApAsyCwknmGIiOX9d1TrYhy38c59MdVrnkFZVeRDFSvP9Ts0iFlZGiC3JUa2Gohx3xJvNrFbQXuyu6sgDVZKxf4vwYNlxBb5sCO4atfYP/wug4MBrwWI563pMULu/kGGxP4K+EjoDdnOYJzabhrPsz8POC06nT9qHYI8BfB4Rc/vYPaB9+HMiD9uy3x0wx90a40KbwuiMSwQMvy54CHlQIGU+/46ejKAnNFBCrnEcwGiZAFpLPRO3LM2MPouJ8VFXplj8ID79NSqPmtJyP9OrFDJE2Wokk4MWSmAP5touQTOrrs7YLThQf2qwVz1GSYCO3Nm7gu15ELGbsfAZwoJet3D0DR3vFTHMXv7P3TPMFCIx/VtKCT5ILFs0tre0VeP56qdVKoJ7i5MTITBcisZUXazXQELh2nfavj7dw69g==,iv:t4l+xWk3VTifP8HNQxrDnl0CsGtwE60wdKltjEWxrMY=,tag:brxmRwjN8DOSyYweFoa7JQ==,type:str] invidious: db: ENC[AES256_GCM,data:9KzrxFfp4pjyNNmLB5OJHxABm4n1BQw+xo6/yvs7oTQPnDHpPp2tWA==,iv:A04RaDmwLfXSzgvZZxPE9rl0/2YGlJq+UcTja92Gih0=,tag:4jirsOim4Rnuc/EF2mPmow==,type:str] + env: ENC[AES256_GCM,data:aCyvyyK+oftllLStlL0PHLzFrmcPYS4KRiSoJsnYkZfTKIfe/vaHeXaAl93cuRipicafG1IggiL8FJ4KjvaMyz3gq+UtTy5GceRQ4xS9BaVdkJRH5vJ4ds3eqjQRuZk4VLNSLjaEUotOjhjoGxblLsyqeIXsbP4tUdfVPOomD9i9g6jQDPtE3jCN4oZoOp6HCYZDxz1zwu2+UjfcAmiCL9XihSL0a/DmhHdm,iv:dn+votjcpsJ5lTQYZxEJfD0qsuzdiC3xuIMg0Vqvfwk=,tag:yFAukcoKAsZBsttgo9fabw==,type:str] lldap: admin: ENC[AES256_GCM,data:axo68K9FOevl777fPDl5DHGd4rOuKPJEhWKe+S3qxqrXRRliZFL8Jw==,iv:3jPGyfDlewKCxhTPN/LA1EbcUnwZvE5DP1gbbLIMaxU=,tag:xZyc3ux0gMkZHqE/FH8p9g==,type:str] jwt: ENC[AES256_GCM,data:9Mt+xJPk1w5F9bXlR5LWlUIyfi2f8wW3R+FKfASwNF+LbSdgi4W7VLqhAoN7pfD5z4kdCshKJhKSZ0lQ4CTM4sbKMsKPefjn+3Fr5epBh7Bj6RgOxaY1I4cuqHkm9QkB9tHRrg==,iv:DvMFm6QvHK8Iz02HGvbb/4sEj6/koVJ8ftFyo5HMBm0=,tag:mK6IyNEQHkumyiF/uUgcLA==,type:str] @@ -134,8 +135,8 @@ sops: emdEU3AwZ2M1NlRsSU5xS0hlZExUYmsK+pq6iur8hI5M462FJimX7P1WZ3j9iykj XQK1+fvImHwYVDi27TAHuwlfB3sGsfXRD876zh+2EknjJJFETL59MQ== -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-04-10T11:56:55Z" - mac: ENC[AES256_GCM,data:ArmZ+CA+eJLzgf7dI+smlYU4Nm34GL3NqBJMyIFK9ooqsPYbFUSOQeZep1ePwQQCRglZSns2BHJNnSLfsN0O2JPrQp0s9/KqPJOI1ZPSaDWx6/HAVB02iA9fMSF5CcAQPwoCG2nOErQDDSAJlXzY6LmkGFVT6zPYuk6U+aze7sw=,iv:j6QHdcc//oDf9MZUrjYoY60olplKCRlo5o5af+bAln8=,tag:+GfP3vKffn1ePOu5s1JT7Q==,type:str] + lastmodified: "2024-04-17T13:51:19Z" + mac: ENC[AES256_GCM,data:WA7e9qAo9+Czk2ZA8FsEh8Q9pONgxKvZyeyPaXKNowoEYcpdzq7y2HI0fKLgRw08w7o4YQMrjRxOO3GVLrRE+qYZYRP94WR/m5xk5unARWL8CFPzjEsCqngiBiUp358u6JqadoUnpIxcOj1YrLAfXOm79dnGBVD602wrfwRgDfc=,iv:fZSL0h58HOaM3G1oo2g/ReDZfJh0aDG8W727Ztz2iUw=,tag:v/lgEbSUGCEI04VqYB1udg==,type:str] pgp: [] unencrypted_suffix: _unencrypted version: 3.8.1