diff --git a/junk.nix b/junk.nix index 7e0e963..9e45f61 100644 --- a/junk.nix +++ b/junk.nix @@ -32,31 +32,49 @@ }; - containers."jumphost" = { - autoStart = true; - privateNetwork = true; - hostBridge = "br0"; - config = {config, pkgs, lib, ... }: { - networking.useDHCP = lib.mkForce true; - services.endlessh = { - enable = true; - port = 22; - openFirewall = true; + containers = { + "jumphost" = { + autoStart = true; + privateNetwork = true; + hostBridge = "br0"; + config = {config, pkgs, lib, ... }: { + networking.useDHCP = lib.mkForce true; + services.endlessh = { + enable = true; + port = 22; + openFirewall = true; + }; + services.openssh = { + enable = true; + ports = [ 2022 ]; + settings.PasswordAuthentication = false; + }; + users.users."jump" = { + name = "jump"; + isNormalUser = true; + }; + services.fail2ban.enable = true; }; - services.openssh = { - enable = true; - ports = [ 2022 ]; - settings.PasswordAuthentication = false; + }; + "nextcloud" = { + autoStart = true; + privateNetwork = true; + hostBridge = "br0"; + config = {config, lib, pkgs, ... }: { + networking.useDHCP = lib.mkForce true; }; - users.users."jump" = { - name = "jump"; - isNormalUser = true; + }; + "gnunet" = { + autoStart = true; + privateNetwork = true; + hostBridge = "br0"; + config = {config, lib, pkgs, ...}: { + networking.useDHCP = lib.mkForce true; + services.gnunet.enable = true; }; - services.fail2ban.enable = true; }; }; - # Open ports in the firewall. networking.firewall.allowedTCPPorts = [ 53589 ]; networking.firewall.allowedUDPPorts = [ 9200 ];