nix/profiles/sysadmin.nix
Ryan Lahfa a4ab0fce56 profiles/auditd: enable on all systems
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-14 20:40:47 +01:00

15 lines
348 B
Nix

{ pkgs, ... }: {
users.users.root.openssh.authorizedKeys.keyFiles = [
../pubkeys/raito.keys
../pubkeys/bensmrs.keys
];
users.motd = (builtins.readFile ./federez.motd);
networking.firewall.logRefusedConnections = false;
security.auditd.enable = true;
environment.systemPackages = [
pkgs.htop
pkgs.kitty.terminfo
];
}