diff --git a/.vscode/settings.json b/.vscode/settings.json index ab7e433..1dd58c9 100644 --- a/.vscode/settings.json +++ b/.vscode/settings.json @@ -2,5 +2,10 @@ "nixEnvSelector.nixFile": "${workspaceRoot}/shell.nix", "editor.defaultFormatter": "B4dM4n.nixpkgs-fmt", "editor.formatOnSave": true, - "editor.formatOnType": true + "editor.formatOnType": true, + "workbench.colorCustomizations": { + "activityBar.background": "#33038C", + "titleBar.activeBackground": "#4804C4", + "titleBar.activeForeground": "#FCFBFF" + } } \ No newline at end of file diff --git a/features/server/harden.nix b/features/server/harden.nix index 5490391..4426e6f 100644 --- a/features/server/harden.nix +++ b/features/server/harden.nix @@ -1,9 +1,13 @@ { pkgs, ... }: { + # Firewall networking.firewall.enable = true; + security.sudo.execWheelOnly = true; + security.auditd.enable = true; security.audit.enable = true; + services = { openssh = { enable = true; diff --git a/hosts/hetzner/ax101.nix b/hosts/hetzner/ax101.nix index 11bce06..8934407 100644 --- a/hosts/hetzner/ax101.nix +++ b/hosts/hetzner/ax101.nix @@ -103,10 +103,6 @@ services.netdata.enable = true; - programs = { - mosh.enable = true; - }; - environment.systemPackages = with pkgs; [ cryptsetup ];