nfs: the the jumphost

TODO.md

@@ -1,8 +1,9 @@
 # Tasks
+- Add readme
+- Add SSH Keys
+- LDAP tuning
+- Default desktop
 - Lock installer shells
-- Allow multiple users to log-in
-- Check external SSH access
-    - Exim recovery
 
 - Quota per user on homedir
 

client/desktop.nix

@@ -18,7 +18,7 @@ with lib;
 
       desktopManager = {
         gnome = {
-          enable = true;
+          enable = false; # Flashback only
           debug = true;
 
           flashback.enableMetacity = true;

machines/nfs/default.nix

@@ -6,6 +6,7 @@
     ./cache.nix
     ./netinstaller.nix
     ./wol.nix
+    ../../client/users.nix
   ];
 
   deployment = {
@@ -14,10 +15,16 @@
 
   networking = {
     interfaces."enp4s0f0" = {
-      ipv4.addresses = [{
-        address = "10.33.64.20";
-        prefixLength = 20;
-      }];
+      ipv4.addresses = [
+        {
+          address = "10.33.64.20";
+          prefixLength = 20;
+        }
+        {
+          address = "10.33.64.71";
+          prefixLength = 20;
+        }
+      ];
     };
 
     interfaces."enp4s0f1" = {

shared/users.nix

@@ -4,8 +4,7 @@
   users.mutableUsers = false;
 
   users.users."root" = {
-    #TODO: hashedPassword = "$y$j9T$5ZEv2RROIXAqdFjFEXEst0$5HA63fmwjGXw1id4n94TRgY1gTuXsQGKXmzlcWXyE07";
-    hashedPassword = "$y$j9T$IqOVsS6/ACfhDXzA3LqsZ1$J/16UDhw44bHWJqIoCdjms6IEwT4tk4ghq2WpThOlMA";
+    hashedPassword = "$y$j9T$wXcRddxlkZN3j3QtMWn0O.$RjcHwreNh.zflso8y/gaAZjk61Mm59KEoSQwMlY0zPB";
 
     openssh.authorizedKeys.keys = [
       "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK2nkarN0+uSuP5sGwDCb9KRu+FCjO/+da4VypGanPUZ fooker@k-2so"