mio-ops/profiles/server_common.nix

34 lines
645 B
Nix

# Configuration common to all my servers
{
config,
pkgs,
lib,
...
}: let
sources = import ../nix/sources.nix;
nixpkgs2111 = (import sources.nixos2111 {}).pkgs;
in {
imports = [
../profiles/openssh.nix
../secrets/user-craige.nix
../secrets/user-root.nix
];
programs.mosh = {
enable = true;
withUtempter = true;
};
services.postgresql = {
package = pkgs.postgresql_11;
};
services.postgresqlBackup = {
enable = true;
compression = "zstd";
};
security.polkit.enable = false; # avoid CVE-2021-4034 (PwnKit)
services.udisks2.enable = false; # disable udisks2 which enables polkit
}