+4
-2
dns/dnsconfig.js
+4
-2
dns/dnsconfig.js
···
9
9
DnsProvider(DSP_CLOUDFLARE),
10
10
DefaultTTL(1),
11
11
A("@", WOLUMONDE_IP, CF_PROXY_OFF),
12
-
A("dawn", WOLUMONDE_IP, CF_PROXY_OFF),
13
12
A("doc", WOLUMONDE_IP, CF_PROXY_OFF),
14
13
A("git", WOLUMONDE_IP, CF_PROXY_OFF),
15
-
A("guestbook", WOLUMONDE_IP, CF_PROXY_OFF),
16
14
A("limbus", WOLUMONDE_IP, CF_PROXY_OFF),
17
15
A("pmart", WOLUMONDE_IP, CF_PROXY_OFF),
18
16
A("webhook", WOLUMONDE_IP, CF_PROXY_OFF),
···
23
21
A("likes", WOLUMONDE_IP, CF_PROXY_OFF),
24
22
A("vpn", WOLUMONDE_IP, CF_PROXY_OFF),
25
23
A("id", WOLUMONDE_IP, CF_PROXY_OFF),
24
+
// atp handles
25
+
A("dawn", WOLUMONDE_IP, CF_PROXY_OFF),
26
+
A("guestbook", WOLUMONDE_IP, CF_PROXY_OFF),
27
+
A("drew", WOLUMONDE_IP, CF_PROXY_OFF),
26
28
// A("meow", WOLUMONDE_IP, CF_PROXY_OFF),
27
29
// thing
28
30
// TXT("id", "a data endpoint for entity with serial id /90008/."),
+7
-8
hosts/wolumonde/modules/atproto.nix
+7
-8
hosts/wolumonde/modules/atproto.nix
···
33
33
in
34
34
{
35
35
security.acme.certs."gaze.systems".extraDomainNames = [
36
-
dawnDid guestbookDid
37
-
# "meow.gaze.systems"
36
+
dawnDid guestbookDid "drew.gaze.systems"
38
37
];
39
38
services.nginx.virtualHosts = {
40
39
# "gaze.systems" = mkWellKnownCfg {
···
46
45
# "9.0.0.0.8.e.f.1.5.0.7.4.0.1.0.0.2.ip6.arpa" = mkWellKnownCfg {
47
46
# "atproto-did" = pkgs.writeText "server" "did:plc:dfl62fgb7wtjj3fcbb72naae";
48
47
# };
49
-
# "meow.gaze.systems" = {
50
-
# useACMEHost = "gaze.systems";
51
-
# quic = true;
52
-
# kTLS = true;
53
-
# forceSSL = true;
54
-
# };
48
+
"drew.gaze.systems" = (mkWellKnownCfg {
49
+
"atproto-did" = pkgs.writeText "server" "did:plc:vo6ie3kd6xvpjlof4pnb2zzp";
50
+
}) // {
51
+
useACMEHost = "gaze.systems";
52
+
forceSSL = true;
53
+
};
55
54
}
56
55
// (mkDidWebCfg dawnDid)
57
56
// (mkDidWebCfg guestbookDid);
+5
users/dusk@devel.mobi/default.nix
+5
users/dusk@devel.mobi/default.nix
+13
-3
users/modules/ssh/default.nix
+13
-3
users/modules/ssh/default.nix
···
1
1
{
2
2
programs.ssh = {
3
3
enable = true;
4
-
compression = true;
5
-
hashKnownHosts = true;
6
-
addKeysToAgent = "yes";
4
+
enableDefaultConfig = false;
5
+
matchBlocks."*" = {
6
+
forwardAgent = false;
7
+
serverAliveInterval = 0;
8
+
serverAliveCountMax = 3;
9
+
compression = true;
10
+
hashKnownHosts = true;
11
+
addKeysToAgent = "yes";
12
+
userKnownHostsFile = "~/.ssh/known_hosts";
13
+
controlMaster = "no";
14
+
controlPath = "~/.ssh/master-%r@%n:%p";
15
+
controlPersist = "no";
16
+
};
7
17
# Only needed for darcs hub
8
18
# extraConfig = ''
9
19
# Host hub.darcs.net