disable spaceboyz backup. Add cockpit

.gitignore

@@ -1 +1,2 @@
 result
+domainhash.txt

configuration.nix

@@ -5,6 +5,10 @@
 { config, lib, pkgs, ... }:
 
 {
+
+  system.autoUpgrade.enable = true;
+  system.autoUpgrade.allowReboot = true;
+
   console.keyMap = "de";
 
   imports =
@@ -13,12 +17,14 @@
 
       # meine module
       modules/tmux.nix
-      modules/cron.nix
+      # in das backup von cloud.boogiedev.net umwandeln: modules/cron.nix
       modules/users.nix
       modules/storage.nix
       modules/root-programs.nix
       modules/smb.nix
       modules/tailscale.nix
+      modules/veracrypt.nix
+      modules/cockpit.nix
 
       #Server
       modules/nextcloud.nix

dot-files/.bashrc

@@ -0,0 +1,31 @@
+## bash prompt styling
+PS1="\[\e[32m\][\u@\h\]]:\[\e[34m\]\w\[\e[0m\]# "
+
+echo "## Mache ssh key verfügbar##"
+eval "$(ssh-agent -s)"
+ssh-add ~/.ssh/id_bfds_gitea
+
+echo
+echo "=============="
+echo "## Wechsel zu aktueller NixOS config Verzeichnis ##"
+echo "## run: git status"
+cd /etc/nixos/
+git status
+
+echo 
+echo "=============="
+alias tmuxxx='tmux -f /etc/nixos/dot-files/.tmux.conf new -d -s mainsession'
+alias tmuxx='tmux -f /etc/nixos/dot-files/.tmux.conf attach -t mainsession'
+    
+### !! if not running inside tmux, ask user to start tmux or create session !!
+if [ -z "$TMUX" ]; then
+    if ! tmux ls &> /dev/null; then
+        tmuxxx
+    fi
+
+    read -p "tmux starten (tmuxx / tmuxxx)? (j/n): " answer
+    if [ "$answer" = "j" ] || [ "$answer" = "y" ]; then
+        tmuxx
+    fi
+fi
+### !! if not running inside tmux !!

dot-files/.tmux.conf

@@ -1,6 +1,6 @@
-set -g default-shell /bin/bash
+set -g default-shell /run/current-system/sw/bin/bash
-set -g default-command /bin/bash
+set -g default-command bash
-set-option -g default-shell /bin/bash
+set-option -g default-shell /run/current-system/sw/bin/bash
 
 set-window-option -g automatic-rename on
 
@@ -18,7 +18,7 @@ set -g history-limit 3000
 set -g status-interval 60
 ##set -g status-left '#H#[default]'  ##computername augeblendet, weil letzte Zeichen abgeschnitten
 set-option -g status-right-length 200
-set -g status-right 'ƒ #(~/code/lokale-scripte/show-disk-usage.sh) ƒ Akku: #(~/code/lokale-scripte/akku.sh) ƒ %d-%m-%Y ƒ %H:%M:%S'
+set -g status-right '%Y-%m-%d ƒ %H:%M:%S'
 setw -g monitor-activity on
 set -g visual-activity on
 #setw -g mode-keys copy-mode-vi

modules/cockpit.nix

@@ -0,0 +1,17 @@
+{ config, pkgs, ... }:
+
+{
+  environment.systemPackages = with pkgs; [
+      cockpit # cockpit
+  ];
+
+  services.cockpit = {
+    enable = true;
+    port = 9090;
+    settings = {
+      WebService = {
+        AllowUnencrypted = true;
+      };
+    };
+  };
+}

modules/root-programs.nix

@@ -20,10 +20,10 @@
     #coding
     python3
 
-   #network
+    #network
-   dig
+    dig
 
-   #lets encrypt
+    #lets encrypt
-   lego
+    lego
    ];
 }

modules/smb.nix

@@ -18,6 +18,19 @@
     securityType = "user";
 
     extraConfig = ''
+
+      # Server-seitige SMB-Signatur erzwingen
+      server signing = mandatory
+      client signing = mandatory
+
+      # Aktiviert die Unterstützung für SMB2 und SMB3
+      server min protocol = SMB2
+      server max protocol = SMB3
+
+      # Erlaubt sichere Negotation von Verbindungen
+      client min protocol = SMB2
+      client max protocol = SMB3
+
       workgroup = WORKGROUP
       server string = BFDS
       netbios name = BFDS

modules/tmux.nix

@@ -1,22 +1,11 @@
 { pkgs, ... }:
 
-
 {
   programs.tmux = {
     enable = true;
 #    clock24 = true;
+    
     extraConfig = ''
-     ## default config aus meinen dotfiles
-     `echo "$(cat /etc/nixos/dot-files/.tmux.conf)"`
-     
-     ## individuelle config für bfds
-    
-     ### colors ###
-     # Ändern der Farbe des Rahmens auf Gelb
-     set -g pane-border-fg yellow
-     # Ändern der Hintergrundfarbe des Rahmens auf Blau
-     set -g pane-active-border-bg blue
-
     '';
   };
 

modules/veracrypt.nix

@@ -0,0 +1,14 @@
+{ config, lib, pkgs, ... }:
+
+{
+  nixpkgs.config.allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) 
+  [
+    "veracrypt"
+  ];
+
+
+
+  environment.systemPackages = [
+    pkgs.veracrypt
+  ];
+}