tin vip vai lon

modules/services/cloudflare-dyndns.nix

@@ -0,0 +1,13 @@
+{ ... }:
+{
+  services.cloudflare-dyndns = {
+    enable = true;
+    apiTokenFile = "/home/asakiyuki/.secret/CLOUDFLARE_TOKEN_KEY";
+    frequency = "*:0/5";
+    proxied = true;
+    ipv6 = false;
+    ipv4 = true;
+    deleteMissing = false;
+    domains = [ "ddns.asakiyuki.com" ];
+  };
+}

modules/services/fail2ban.nix

@@ -0,0 +1,9 @@
+{ ... }:
+{
+  security.fail2ban = {
+    enable = true;
+    ignoreIP = [
+      "192.168.0.0/16"
+    ];
+  };
+}

modules/services/openssh.nix

@@ -0,0 +1,21 @@
+{ ... }:
+{
+  services.openssh = {
+    enable = true;
+    ports = [ 15523 ];
+    authorizedKeysInHomedir = true;
+    authorizedKeysFiles = [ "/home/asakiyuki/.ssh/authorized_keys" ];
+    settings = {
+      AllowUsers = [
+        "asakiyuki"
+        "junko"
+      ];
+      PasswordAuthentication = true;
+      KbdInteractiveAuthentication = false;
+      AllowAgentForwarding = false;
+      AllowStreamLocalForwarding = false;
+      X11Forwarding = false;
+      PermitRootLogin = "no";
+    };
+  };
+}

modules/services/pipewire.nix

@@ -1,6 +1,7 @@
-{ ... }: {
-    services.pipewire = {
-        enable = true;
-        pulse.enable = true;
-    };
-}
+{ ... }:
+{
+  services.pipewire = {
+    enable = true;
+    pulse.enable = true;
+  };
+}