harry
/
it-infra
forked from M-Labs/it-infra
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

nixops: set StreamLocalBindUnlink

This commit is contained in:
Sebastien Bourdeauducq 2020-07-15 12:32:57 +08:00
parent b29ee1d386
commit bebfe728de
3 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
nixops/desktop.nix
View File

@ -47,6 +47,10 @@ in
services.openssh.enable = true; services.openssh.enable = true;
services.openssh.forwardX11 = true; services.openssh.forwardX11 = true;
services.openssh.passwordAuthentication = false; services.openssh.passwordAuthentication = false;
services.openssh.extraConfig =
''
StreamLocalBindUnlink yes
'';
hardware.u2f.enable = true; hardware.u2f.enable = true;
services.pcscd.enable = true; services.pcscd.enable = true;
programs.ssh.extraConfig = programs.ssh.extraConfig =

4
nixops/light.nix
View File

@ -35,6 +35,10 @@
services.openssh.enable = true; services.openssh.enable = true;
services.openssh.forwardX11 = true; services.openssh.forwardX11 = true;
services.openssh.passwordAuthentication = false; services.openssh.passwordAuthentication = false;
services.openssh.extraConfig =
''
StreamLocalBindUnlink yes
'';
hardware.u2f.enable = true; hardware.u2f.enable = true;
services.pcscd.enable = true; services.pcscd.enable = true;
programs.ssh.extraConfig = programs.ssh.extraConfig =

4
nixops/rpi.nix
View File

@ -35,6 +35,10 @@ in
services.openssh.enable = true; services.openssh.enable = true;
services.openssh.passwordAuthentication = false; services.openssh.passwordAuthentication = false;
services.openssh.extraConfig =
''
StreamLocalBindUnlink yes
'';
networking.hostName = host; networking.hostName = host;
time.timeZone = "Asia/Hong_Kong"; time.timeZone = "Asia/Hong_Kong";