Currently broken config...

This commit is contained in:
root
2020-01-15 11:24:11 -06:00
parent 46c45f4440
commit 00a97b1d94
51 changed files with 2991 additions and 364 deletions
+9 -28
View File
@@ -5,10 +5,8 @@
{
imports = [
./hardware-configuration.nix
./packages/postgresql_11_gssapi.nix
./packages/minecraft-server_1_15_1.nix
./config/fudo.nix
./config/postgresql_11.nix
./packages/local.nix
./config/local.nix
];
nixpkgs.config.allowUnfree = true;
@@ -97,7 +95,6 @@
mosh.enable = true;
ssh = {
forwardX11 = true;
extraConfig = ''
GSSAPIAuthentication yes
GSSAPIDelegateCredentials yes
@@ -126,7 +123,6 @@
openssh = {
enable = true;
startWhenNeeded = true;
forwardX11 = true;
extraConfig = ''
GSSAPIAuthentication yes
GSSAPICleanupCredentials yes
@@ -146,31 +142,16 @@
};
};
users.groups = {
fudosys = {
gid = 888;
users.extraUsers = {
node = {
isSystemUser = true;
group = "nogroup";
};
};
users.ldap = {
enable = true;
base = "dc=fudo,dc=org";
bind.distinguishedName = "cn=auth_reader,dc=fudo,dc=org";
bind.passwordFile = "/srv/nslcd/bind.passwd";
bind.timeLimit = 5;
loginPam = false;
server = "ldap://france.fudo.org";
timeLimit = 5;
useTLS = true;
extraConfig = ''
TLS_CACERT /etc/nixos/static/fudo_ca.pem
'';
daemon = {
enable = true;
extraConfig = ''
tls_cacertfile /etc/nixos/static/fudo_ca.pem
'';
users.groups = {
fudosys = {
gid = 888;
};
};