ItsDrike/nixdots
1
0
Fork 0
mirror of https://github.com/ItsDrike/nixdots synced 2025-06-29 14:00:45 +00:00
Code Issues Projects Releases Packages Wiki Activity

Full rewrite

Browse source
This commit is contained in:
ItsDrike 2024-03-21 21:47:25 +01:00
parent 8053e16a12
commit 8dc12c0ae7
Signed by: ItsDrike
GPG key ID: FA2745890B7048C0
29 changed files with 294 additions and 74 deletions
Download patch file Download diff file Expand all files Collapse all files

5
system/services/default.nix Normal file
View file

@ -0,0 +1,5 @@
_: {
imports = [
./ssh.nix
];
}

20
system/services/oomd.nix Normal file
View file

@ -0,0 +1,20 @@
{ lib, ... }: {
systemd = {
# OOMd: Out Of Memory daemon
# By default, this will only kill cgroups. So either systemd services
# marked for killing uder OOM or (non-default, but enabled here) the entire user slice.
oomd = {
enable = true;
enableSystemSlice = true;
enableRootSlice = true;
enableUserSlices = true;
extraConfig = {
"DefaultMemoryPressureDurationSec" = "20s";
};
};
# Make nix builds more likely to get killed than other important services.
# The default for user slices is 100, and systemd-coredumpd is 500
services.nix-daemon.serviceConfig.OOMScoreAdjust = lib.mkDefault 350;
};
}

12
system/services/ssh.nix Normal file
View file

@ -0,0 +1,12 @@
{ ... }: {
# TODO: This really shouldn't be a default service in system/
services.openssh = {
enable = true;
settings = {
PermitRootLogin = "prohibit-password";
PasswordAuthentication = false;
X11Forwarding = false;
};
};
}