Secure certificates after generation

This commit is contained in:
Jonas Juselius
2019-02-23 15:34:28 +01:00
parent cce9aa825b
commit 66d29be22c
19 changed files with 2098 additions and 144 deletions

View File

@@ -27,17 +27,23 @@
security.rtkit.enable = true;
disabledModules = [ "services/cluster/kubernetes/default.nix" ];
disabledModules = [
# "services/cluster/kubernetes/default.nix"
"services/cluster/kubernetes/dns.nix"
"services/cluster/kubernetes/dashboard.nix"
];
imports = [
./users.nix
./packages.nix
./overlays/kubernetes.nix
./overlays/dns.nix
./overlays/dashboard.nix
# ./overlays/kubernetes.nix
];
nixpkgs.overlays = [
(import ./overlays/overlays.nix)
];
# nixpkgs.overlays = [
# (import ./overlays/overlays.nix)
# ];
users.extraUsers.root.openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKiAS30ZO+wgfAqDE9Y7VhRunn2QszPHA5voUwo+fGOf jonas"