summaryrefslogtreecommitdiff
path: root/Omni/Os/Base.nix
diff options
context:
space:
mode:
authorBen Sima <ben@bsima.me>2025-03-21 10:21:54 -0400
committerBen Sima <ben@bsima.me>2025-04-11 12:30:29 -0400
commitd4fba38b5d68952457bf1316471faf08e78950ca (patch)
treebc540e16f1d48234a10f6a7749541e35e0233661 /Omni/Os/Base.nix
parent63def24ec7c20dcd226695e30cd8ae9390f5bc10 (diff)
Enable eternal-terminal everywhere
I prefer et over mosh, so I tend to reach for it. Might as well just enable it everywhere, at the Os/Base.nix level rather than individual systems.
Diffstat (limited to 'Omni/Os/Base.nix')
-rw-r--r--Omni/Os/Base.nix2
1 files changed, 2 insertions, 0 deletions
diff --git a/Omni/Os/Base.nix b/Omni/Os/Base.nix
index c18ca1d..e221e9e 100644
--- a/Omni/Os/Base.nix
+++ b/Omni/Os/Base.nix
@@ -5,6 +5,7 @@ let
in {
boot.tmp.cleanOnBoot = true;
networking.firewall.allowPing = true;
+ networking.firewall.allowedTCPPorts = [ports.et];
nix.settings.substituters = ["https://cache.nixos.org"]; # "ssh://dev.simatime.com" ];
nix.gc.automatic = true;
nix.gc.dates = "Sunday 02:15";
@@ -20,6 +21,7 @@ in {
security.sudo.wheelNeedsPassword = false;
services.clamav.daemon.enable = true; # security
services.clamav.updater.enable = true; # security
+ services.eternal-terminal.enable = true;
services.fail2ban.enable = true; # security
services.fail2ban.ignoreIP = [ports.bensIp]; # my home IP
services.fail2ban.maxretry = 10;