modules: more fmting

This commit is contained in:
notohh 2024-02-01 16:03:44 -05:00
parent 034bc87e37
commit 74c6055414
Signed by: notohh
GPG key ID: BD47506D475EE86D
4 changed files with 55 additions and 51 deletions

View file

@ -43,30 +43,31 @@
boot.kernelModules = ["tcp_bbr"];
services.openssh.settings.LogLevel = "VERBOSE";
security.acme = {
acceptTerms = true;
defaults.email = "github@notohh.dev";
};
services.fail2ban = {
enable = true;
bantime = "1h";
maxretry = 1;
ignoreIP = [
"192.168.0.0/16"
"172.16.0.0/12"
"10.0.0.0/8"
"5.161.102.107/32"
"100.71.49.65/10"
"100.82.146.40/10"
];
jails = {
DEFAULT = {
settings = {
findtime = 100000;
mode = "aggressive";
services = {
openssh.settings.LogLevel = "VERBOSE";
fail2ban = {
enable = true;
bantime = "1h";
maxretry = 1;
ignoreIP = [
"192.168.0.0/16"
"172.16.0.0/12"
"10.0.0.0/8"
"5.161.102.107/32"
"100.71.49.65/10"
"100.82.146.40/10"
];
jails = {
DEFAULT = {
settings = {
findtime = 100000;
mode = "aggressive";
};
};
};
};

View file

@ -13,8 +13,6 @@
tailscale.enable = true;
};
time.timeZone = "America/New_York";
i18n = {
defaultLocale = "en_US.UTF-8";
extraLocaleSettings = {

View file

@ -1,23 +1,26 @@
_: {
services.chrony = {
enable = true;
servers = [
# 0.us.pool.ntp.org
"134.215.114.62"
"192.189.65.187"
"96.245.170.99"
"192.92.6.30"
];
};
time.timeZone = "America/New_York";
services.timesyncd = {
enable = true;
servers = [
# 0.us.pool.ntp.org
"134.215.114.62"
"192.189.65.187"
"96.245.170.99"
"192.92.6.30"
];
services = {
chrony = {
enable = true;
servers = [
# 0.us.pool.ntp.org
"134.215.114.62"
"192.189.65.187"
"96.245.170.99"
"192.92.6.30"
];
};
timesyncd = {
enable = true;
servers = [
# 0.us.pool.ntp.org
"134.215.114.62"
"192.189.65.187"
"96.245.170.99"
"192.92.6.30"
];
};
};
}

View file

@ -1,17 +1,19 @@
_: {
virtualisation.oci-containers.backend = "docker";
virtualisation.docker = {
enable = true;
enableOnBoot = true;
autoPrune = {
virtualisation = {
oci-containers.backend = "docker";
docker = {
enable = true;
dates = "weekly";
flags = [
"--all"
enableOnBoot = true;
autoPrune = {
enable = true;
dates = "weekly";
flags = [
"--all"
];
};
listenOptions = [
"/run/docker.sock"
];
};
listenOptions = [
"/run/docker.sock"
];
};
}