finish configuration for ssh

- iptables geoip whitelist for ssh
- NOPASSWD for efibootmgr, allowing easy reboot into windows from laptop/phone
- no fastfetch for remote shells
This commit is contained in:
greyweather committed 2026-07-16 23:01:20 +01:00
1 parent 63a645446d
commit 9a3530aa6a
14 files changed
+11896 -87

No files matched your search

+31
View File
@@ -61,6 +61,17 @@ in {
gtk2.force = true;
};
programs.ssh = {
settings = {
"sakamoto" = {
HostName = "192.168.0.40";
Port = "22";
User = "grey";
IdentityFile = "~/.ssh/id_sakamoto";
};
};
};
home.activation = {
linkAutostartDir = lib.hm.dag.entryAfter ["writeBoundary"] ''
#!/bin/bash
@@ -81,4 +92,24 @@ in {
sudo reboot
'';
};
home.file.".local/bin/universal-shutdown" = {
enable = true;
force = true;
executable = true;
text = ''
#!/usr/bin/env bash
sudo systemctl poweroff
'';
};
home.file.".local/bin/universal-reboot" = {
enable = true;
force = true;
executable = true;
text = ''
#!/usr/bin/env bash
sudo reboot
'';
};
}