Noratrieb/vps
1
0
Fork 0
mirror of https://github.com/Noratrieb/vps.git synced 2026-01-14 16:55:00 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

prepare for fakessh

Browse source
This commit is contained in:
nora 2024-08-12 01:42:11 +02:00
parent f06354212d
commit 7047b6a9ed
2 changed files with 24 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

24
newinfra/nix/hive.nix
View file

@ -15,6 +15,7 @@
slides = fetchTarball "https://github.com/Noratrieb/slides/archive/0401f35c22b124b69447655f0c537badae9e223c.tar.gz";
pretense = import (fetchTarball "https://github.com/Noratrieb/pretense/archive/270b01fc1118dfd713c1c41530d1a7d98f04527d.tar.gz");
fakessh = import (fetchTarball "https://github.com/Noratrieb/fakessh/archive/7a129eba2e0bd15d46efce2f2e0daebeb6888bec.tar.gz");
networkingConfig = {
dns1 = {
@ -242,7 +243,7 @@
'';
};
# VPS5 is the primary test server, where new things are being deployed that could break stuff maybe.
vps5 = { name, nodes, modulesPath, config, pkgs, ... }: {
vps5 = { name, nodes, modulesPath, config, pkgs, lib, fakessh, ... }: {
imports = [
(modulesPath + "/profiles/qemu-guest.nix")
./modules/contabo
@ -251,6 +252,27 @@
./modules/garage
];
# services.openssh.ports = [ 2000 ];
#systemd.services.fakessh = {
# description = "fakessh ssh honeypot";
# wantedBy = [ "multi-user.target" ];
# after = [ "network.target" ];
# serviceConfig = {
# DynamicUser = true;
# ExecStart = "${lib.getExe (fakessh {inherit pkgs;})}";
# AmbientCapabilities = "CAP_NET_BIND_SERVICE";
# # i really don't trust this.
# MemoryHigh = "100;";
# MemoryMax = "200M";
# Environment = [
# "FAKESSH_LISTEN_ADDR=0.0.0.0:22"
# "RUST_LOG=debug"
# ];
# };
#};
# networking.firewall.allowedTCPPorts = [ 22 ];
#deployment.targetPort = 2000;
deployment.tags = [ "eu" "apps" ];
system.stateVersion = "23.11";
};

2
newinfra/nix/modules/default/default.nix
View file

@ -49,7 +49,7 @@
];
};
};
networking.firewall.allowedTCPPorts = [ 2 3306 5432 1521 ];
networking.firewall.allowedTCPPorts = [ 23 3306 5432 1521 ];
# monitoring