asxpi/nixOS
asxpi/nixOS
1
0
Fork 0
Code Issues Pull requests Activity

podman and opensnitch

Browse source
This commit is contained in:
Sergei Poljanski 2026-01-13 18:12:26 +02:00
commit e75efe4c5c
Signed by: asxpi
GPG key ID: 4F8851660FA4121B
4 changed files with 7 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

2
modules/packages.nix
View file

@ -88,7 +88,7 @@
awscli2 awscli2
# azure-cli # azure-cli
google-cloud-sdk google-cloud-sdk
docker-compose podman-compose
argocd argocd
fluxcd fluxcd
kubectx # switch between contexts/namespaces kubectx # switch between contexts/namespaces

3
modules/programs.nix
View file

@ -42,7 +42,4 @@
# Virtualization (KVM/QEMU) # Virtualization (KVM/QEMU)
virtualisation.libvirtd.enable = true; virtualisation.libvirtd.enable = true;
programs.virt-manager.enable = true; programs.virt-manager.enable = true;
# Docker
virtualisation.docker.enable = true;
} }

5
modules/security.nix
View file

@ -49,6 +49,9 @@
implicitPolicyTarget = "block"; implicitPolicyTarget = "block";
}; };
# OpenSnitch Application Firewall
services.opensnitch.enable = true;
security.pam.loginLimits = [ security.pam.loginLimits = [
{ domain = "*"; item = "core"; type = "-"; value = "0"; } { domain = "*"; item = "core"; type = "-"; value = "0"; }
]; ];
@ -84,5 +87,7 @@
lynis lynis
audit audit
tcpdump tcpdump
bandwhich
opensnitch-ui
]; ];
} }

2
modules/users.nix
View file

@ -8,7 +8,7 @@
users.users.asxpi = { users.users.asxpi = {
isNormalUser = true; isNormalUser = true;
description = "Sergei P"; description = "Sergei P";
extraGroups = [ "networkmanager" "wheel" "dialout" "libvirtd" "docker" ]; extraGroups = [ "networkmanager" "wheel" "dialout" "libvirtd" "podman" ];
shell = pkgs.zsh; shell = pkgs.zsh;
packages = with pkgs; [ packages = with pkgs; [
# Internet # Internet