greg/nix-bitcoin
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

secure-node: improve layout

Browse Source
This commit is contained in:
Erik Arvstedt 2021-01-14 13:24:29 +01:00
parent 5f7a7962f7
commit 0e00c39d47
No known key found for this signature in database
GPG Key ID: 33312B944DD97846
1 changed files with 8 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
modules/presets/secure-node.nix
View File

@ -25,10 +25,14 @@ in {
nix-bitcoin.security.hideProcessInformation = true; nix-bitcoin.security.hideProcessInformation = true;
environment.systemPackages = with pkgs; [
jq
];
# sshd
services.tor.hiddenServices.sshd = mkHiddenService { port = 22; }; services.tor.hiddenServices.sshd = mkHiddenService { port = 22; };
nix-bitcoin.onionAddresses.access.${operatorName} = [ "sshd" ]; nix-bitcoin.onionAddresses.access.${operatorName} = [ "sshd" ];
# bitcoind
services.bitcoind = { services.bitcoind = {
enable = true; enable = true;
listen = true; listen = true;
@ -43,7 +47,6 @@ in {
rpc.threads = 16; rpc.threads = 16;
}; };
# liquidd
services.liquidd = { services.liquidd = {
rpcuser = "liquidrpc"; rpcuser = "liquidrpc";
prune = 1000; prune = 1000;
@ -51,13 +54,11 @@ in {
listen = true; listen = true;
}; };
# Backups nix-bitcoin.nodeinfo.enable = true;
services.backups.frequency = "daily"; services.backups.frequency = "daily";
environment.systemPackages = with pkgs; [ # operator
jq
];
nix-bitcoin.operator.enable = true; nix-bitcoin.operator.enable = true;
users.users.${operatorName} = { users.users.${operatorName} = {
openssh.authorizedKeys.keys = config.users.users.root.openssh.authorizedKeys.keys; openssh.authorizedKeys.keys = config.users.users.root.openssh.authorizedKeys.keys;
@ -69,7 +70,5 @@ in {
cp "${config.users.users.root.home}/.vbox-nixops-client-key" "${config.users.users.${operatorName}.home}" cp "${config.users.users.root.home}/.vbox-nixops-client-key" "${config.users.users.${operatorName}.home}"
''; '';
}; };
nix-bitcoin.nodeinfo.enable = true;
}; };
} }