curben
/
blog
mirror of https://gitlab.com/curben/blog
1
0
Fork 0
Code Issues Releases Wiki Activity

post(nixos): switch 'magic-wormhole' to 'wormhole-william'

This commit is contained in:
MDLeom 2020-11-08 05:38:06 +00:00
parent c5badae866
commit c2d9914916
No known key found for this signature in database
GPG Key ID: 32D3E28E96A695E8
2 changed files with 18 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
source/_posts/caddy-nixos-part-1.md
View File

@ -102,18 +102,18 @@ nixos-generate-config --root /mnt
2. Replace "eth0" to "ens3" in firewall config (check output of `ifconfig`) 2. Replace "eth0" to "ens3" in firewall config (check output of `ifconfig`)
3. Encrypt the file using 7zip before upload. 3. Encrypt the file using 7zip before upload.
``` sh ``` sh
# This is much less memory-intensive than `nix-env -i package` # This is much less memory-intensive than `nix-env -i package`
# ffsend (unofficial CLI client of Firefox Send) is a good alternative to magic-wormhole, # wormhole-william is Go-implementation of magic-wormhole
# but it has a long URL so it's only usable in ssh where you can copy-paste. # Available in 20.09+
nix-env -f '<nixpkgs>' -iA magic-wormhole p7zip nix-env -f '<nixpkgs>' -iA google-authenticator p7zip usbguard wormhole-william
cd /tmp cd /tmp
wormhole receive configuration.7z wormhole-william receive configuration.7z
7z x configuration.7z 7z x configuration.7z
cp configuration.nix /mnt/etc/nixos/ cp configuration.nix /mnt/etc/nixos/
``` ```
7. Install it without setting root password (so that root remains disabled) 7. Install it without setting root password (so that root remains disabled)
@ -153,9 +153,14 @@ Following is my "configuration.nix". I'll show you how to secure NixOS using has
networking.interfaces.ens3.useDHCP = true; networking.interfaces.ens3.useDHCP = true;
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
dnsutils usbguard magic-wormhole p7zip google-authenticator dnsutils p7zip wormhole-william
]; ];
# Save some typing
environment.shellAliases = {
wormhole = "wormhole-william";
};
time.timeZone = "UTC"; time.timeZone = "UTC";
## Create service users ## Create service users

6
source/_posts/caddy-nixos-part-2.md
View File

@ -26,12 +26,10 @@ Following diagram shows the architecture behind this website.
## Prerequisites ## Prerequisites
Before proceeding to the rest of this guide, there are some system packages that you need to install. Add the packages to `environment.systemPackages` option in "configuration.nix" and run `# nixos-rebuild switch` to install them. Before proceeding to the rest of this guide, there are some system packages that you need to install.
``` ```
environment.systemPackages = with pkgs; [ $ nix-env -f '<nixpkgs>' -iA google-authenticator p7zip usbguard wormhole-william
dnsutils usbguard magic-wormhole p7zip google-authenticator
];
``` ```
## Disable mutableUsers ## Disable mutableUsers