Mic92/stockholm
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

l neoprism.r: disable initrd ssh

Browse Source
This commit is contained in:
lassulus 2023-09-03 11:55:15 +02:00
parent a53b28f0d6
commit 72be85e30b
1 changed files with 21 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

39
lass/1systems/neoprism/physical.nix
View File

@ -13,7 +13,10 @@
boot.loader.grub.enable = true; boot.loader.grub.enable = true;
boot.loader.grub.version = 2; boot.loader.grub.version = 2;
boot.loader.grub.efiSupport = true; boot.loader.grub.efiSupport = true;
boot.loader.grub.devices = [ "/dev/nvme0n1" "/dev/nvme1n1" ]; boot.loader.grub.devices = [
config.disko.devices.disk."/dev/nvme0n1".device
config.disko.devices.disk."/dev/nvme1n1".device
];
boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "sd_mod" ]; boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "sd_mod" ];
boot.kernelModules = [ "kvm-amd" ]; boot.kernelModules = [ "kvm-amd" ];
hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware; hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
@ -56,21 +59,21 @@
}; };
networking.useDHCP = false; networking.useDHCP = false;
boot.initrd.network = { # boot.initrd.network = {
enable = true; # enable = true;
ssh = { # ssh = {
enable = true; # enable = true;
authorizedKeys = [ config.krebs.users.lass.pubkey ]; # authorizedKeys = [ config.krebs.users.lass.pubkey ];
port = 2222; # port = 2222;
hostKeys = [ # hostKeys = [
(toString <secrets/ssh.id_ed25519>) # (<secrets/ssh.id_ed25519>)
(toString <secrets/ssh.id_rsa>) # (<secrets/ssh.id_rsa>)
]; # ];
}; # };
}; # };
boot.kernelParams = [ # boot.kernelParams = [
"net.ifnames=0" # "net.ifnames=0"
"ip=dhcp" # "ip=dhcp"
"boot.trace" # "boot.trace"
]; # ];
} }