esavkin
/
nix-scripts
forked from M-Labs/nix-scripts
1
0
Fork 0
Code Pull Requests Activity

nixbld: cleanup

This commit is contained in:
Sebastien Bourdeauducq 2019-09-18 15:38:07 +08:00
parent 0f45d03e32
commit 361d7445a5
1 changed files with 3 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
nixbld-etc-nixos/configuration.nix
View File

@ -32,7 +32,7 @@ in
networking = { networking = {
hostName = "nixbld"; hostName = "nixbld";
firewall = { firewall = {
allowedTCPPorts = [ 80 443 631 5901 ]; allowedTCPPorts = [ 80 443 631 ];
allowedUDPPorts = [ 53 67 631 ]; allowedUDPPorts = [ 53 67 631 ];
}; };
networkmanager.unmanaged = [ "interface-name:${netifLan}" "interface-name:${netifWifi}" ]; networkmanager.unmanaged = [ "interface-name:${netifLan}" "interface-name:${netifWifi}" ];
@ -123,6 +123,7 @@ in
services.avahi.interfaces = [ netifLan ]; services.avahi.interfaces = [ netifLan ];
services.avahi.publish.enable = true; services.avahi.publish.enable = true;
services.avahi.publish.userServices = true; services.avahi.publish.userServices = true;
nixpkgs.config.allowUnfree = true;
services.printing.enable = true; services.printing.enable = true;
services.printing.drivers = [ pkgs.hplipWithPlugin ]; services.printing.drivers = [ pkgs.hplipWithPlugin ];
services.printing.browsing = true; services.printing.browsing = true;
@ -155,7 +156,7 @@ in
security.sudo.wheelNeedsPassword = false; security.sudo.wheelNeedsPassword = false;
security.hideProcessInformation = true; security.hideProcessInformation = true;
boot.kernel.sysctl."kernel.dmesg_restrict" = true; boot.kernel.sysctl."kernel.dmesg_restrict" = true;
services.udev.packages = [ pkgs.openocd ]; services.udev.packages = [ pkgs.openocd pkgs.sane-backends ];
services.udev.extraRules = '' services.udev.extraRules = ''
ACTION=="add", SUBSYSTEM=="tty", \ ACTION=="add", SUBSYSTEM=="tty", \
ENV{ID_SERIAL}=="FTDI_Quad_RS232-HS", \ ENV{ID_SERIAL}=="FTDI_Quad_RS232-HS", \
@ -173,8 +174,6 @@ ACTION=="add", SUBSYSTEM=="tty", \
''; '';
nixpkgs.config.allowUnfree = true;
nix.distributedBuilds = true; nix.distributedBuilds = true;
nix.buildMachines = [ nix.buildMachines = [
{ {