From 8750d000bc029e8c619828337f8617bc97c36fa9 Mon Sep 17 00:00:00 2001 From: Emelie Graven Date: Wed, 3 Aug 2022 08:57:34 +0200 Subject: [PATCH] Bump to nixpkgs 22.05 --- config/common/services/ssh.nix | 2 +- config/common/users.nix | 5 +- .../hosts/grondahl/data/secrets/secrets.nix | Bin 955 -> 957 bytes .../grondahl/data/secrets/synapse_db_password | Bin 87 -> 0 bytes .../data/secrets/synapse_extra_config | Bin 0 -> 187 bytes config/hosts/grondahl/services/acme.nix | 2 +- config/hosts/grondahl/services/redis.nix | 10 +- config/hosts/grondahl/services/synapse.nix | 122 +++++++-------- config/hosts/rudiger/services/acme.nix | 2 +- config/hosts/rudiger/services/nextcloud.nix | 2 +- config/hosts/rudiger/services/redis.nix | 12 +- config/hosts/wind/services/acme.nix | 2 +- config/hosts/wind/services/synapse.nix | 148 +++++++++--------- config/sources/nix/sources.json | 26 +-- 14 files changed, 170 insertions(+), 163 deletions(-) delete mode 100644 config/hosts/grondahl/data/secrets/synapse_db_password create mode 100644 config/hosts/grondahl/data/secrets/synapse_extra_config diff --git a/config/common/services/ssh.nix b/config/common/services/ssh.nix index a454669..60dceee 100644 --- a/config/common/services/ssh.nix +++ b/config/common/services/ssh.nix @@ -4,7 +4,7 @@ enable = true; permitRootLogin = "no"; passwordAuthentication = false; - challengeResponseAuthentication = false; + kbdInteractiveAuthentication = false; hostKeys = [ { path = config.secrets.files.ssh_host_ed25519_key.file; type = "ed25519"; } ]; kexAlgorithms = [ "curve25519-sha256" "curve25519-sha256@libssh.org" ]; macs = [ "hmac-sha2-512-etm@openssh.com" "hmac-sha2-512-etm@openssh.com" "umac-128-etm@openssh.com" ]; diff --git a/config/common/users.nix b/config/common/users.nix index e39133d..8d92c93 100644 --- a/config/common/users.nix +++ b/config/common/users.nix @@ -5,8 +5,9 @@ isNormalUser = true; extraGroups = [ "wheel" ]; openssh.authorizedKeys.keys = [ - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICO4LyBsW1YuUA6i3EL/IZhchSvk7reO4qgRmR/tdQPU emelie@flap" - "sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIGRtSxLRqPWmsn161ybDFcMYxrBKhay5a485tlM8hQEuAAAABHNzaDo= emelie@thinky-fed" + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICO4LyBsW1YuUA6i3EL/IZhchSvk7reO4qgRmR/tdQPU emelie@flap" + "sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIGRtSxLRqPWmsn161ybDFcMYxrBKhay5a485tlM8hQEuAAAABHNzaDo= emelie@thinky-fed" + "sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIBkWK8PsRh8tOz4800XFN3V2IUm2u95qOaVnuHnMknjiAAAABHNzaDo= emelie@em-work" ]; }; diff --git a/config/hosts/grondahl/data/secrets/secrets.nix b/config/hosts/grondahl/data/secrets/secrets.nix index 249edb2f002158783f59c4399986469a44e1dda0..b79d57c072b44ce1ff1701aea03cdf0e5201cd67 100644 GIT binary patch literal 957 zcmV;u148@&M@dveQdv+`0B_npv@1Hlgq9LAnWA%t$=pCd8%AZ=4+Q#dj8D(Eg+1>R+L^mmtflsB=**v~pY? z;I9C7l!Hsv8NB&gp1Z}5Pgb!82wLxEZ9y`c z5WbuOtY-4If1yKaa$YaM#B591+4P+wllh^#LF~zpC%9Y*y&l~>Eh)?5Ww^s6{4z?m zTvn&w>sis_&els^@|`pl20xIXIrTGdpYzrCz)YYa`@Eq0$v!wmJI%J7HFXuYj$mx?SS*C}K<0s?J(lk^ka$#x zv?qMvyih1C0bSKsD|B4I6^d2ntqSjU?m3cszVg43PA&+03{M`X8^ae#G zG7M!&Qz>=3+Ne-#7snmvRZh0V5?XXyW!eVYcpoDh)$QtJp$3e6!8~au%4;RHH~!7< zZ`iaHHFs6Gya!tMv+`?;Om26$?I$G`s{w?boCsu-65%GyAVD7Y#%!G8YZmf3hcj&$ zI<~IV9{Ouac#H9v7R<$jsU3Jdb2HBh>-waRN@T_)g^AM6VB)`T7$xXGupUL0JZ0qicY6DPdPly%NdKx@>z8bHZ_Dgbep(Kv~;bm+uoII+nv zTKT3)f)MO1*M*#0yr!=q#zHY#ed+8$T03leAi_d?3PC21ClzSDkELi0YBv;j93FyY zN(dM3ow=T3qB`(AB;un3q`^UZUgu8{a|o9cp>(yp0V}VbY$j&I>7$CrzqL&zkWR11 z#@)*)Q8Y%}=xguS8cb&B#cOA!%bP&{N3!~?w=%P6%}^m^R;$gG fw;VOk3Sc6T#e4%cIICMyP3vcNTV76CQ=Acv;=iVgWBs({dLjva)UJfwJ1%~%C3uV6mKoysvrn!$<=_)xlu@*=`N60|^ zW!e2?{+@i7kf^2#R=EnbBW~wMhAlgqc0ERDC4oIar7o^GJYS7hnfp^_i@PTAuG&xY zzqnZ`-trLa6)BNP7cEM_v#AL?2gp7MVTjhsT}>7G&_{L-Vj#H8C zVw;3Sa*V~$Kyd(~%ftX$PjLSCJMt(<$eG?4K8MgI7GAN#VbE2{)D6`*5OJVClw+T| z6Qqg4rF8LdmlRSoz+g>esq%X=an0IuTp}9P6)&9l&zX7aHgV4Rl`g%50=c7kEc@v}cKvlN$JE z0lh4RC=yZ%%<>Q%);z&w7%A|0YPLL45uAp$EO+p;!IXH~SHMzuaJ1T`m8%Wsa%e31 z>bj$hSVBy;*178GjkSwZt{P243!i|$9xyXKJdD6UodzI)KAtZH6@`a8t9?oW~89Q zb>cJe5oh-QBm!_=)BEpLhgZLd?@$<`Hj-(zh|5e73;Wk~Uh3)S%=s?6O6PVtAkBq7 d7<{~9SWp?=f9q*zvY2E*2zm~3PrrV#(SgAc&*}gG diff --git a/config/hosts/grondahl/data/secrets/synapse_db_password b/config/hosts/grondahl/data/secrets/synapse_db_password deleted file mode 100644 index c2cd71a63320dc7ed02275b19236d533922d8808..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 87 zcmV-d0I2@}M@dveQdv+`0Bnn$Xa>+}R`O(rfZoWyfev@rB>h6&jE`aBMGqC`h301^k}&wgcgN53G-KPYSFfbj~|`OS=MJ7dDAuLiRn)8aqA9Pfz3~L zaLaZq?q_jHpwDbbl%Y4BuS)-90a~K?7hVp$p(dHCrpqQ0p0Rc%&b6f//archive/.tar.gz" }, "nixos-hardware": { @@ -17,22 +17,22 @@ "homepage": "", "owner": "NixOS", "repo": "nixos-hardware", - "rev": "f4160a629bac3538939a3005c8b5c7fb320bcf59", - "sha256": "0w4k1fis534iafc72cjmig72697pz4s3fjj211fhzf443zh49in7", + "rev": "ea3efc80f8ab83cb73aec39f4e76fe87afb15a08", + "sha256": "0h87y6z42ch128j6yslydvdzajqcrqzhihi4nrpwida4js2pl1ak", "type": "tarball", - "url": "https://github.com/NixOS/nixos-hardware/archive/f4160a629bac3538939a3005c8b5c7fb320bcf59.tar.gz", + "url": "https://github.com/NixOS/nixos-hardware/archive/ea3efc80f8ab83cb73aec39f4e76fe87afb15a08.tar.gz", "url_template": "https://github.com///archive/.tar.gz" }, "nixpkgs": { - "branch": "release-21.11", + "branch": "release-22.05", "description": "Nix Packages collection", "homepage": "", "owner": "NixOS", "repo": "nixpkgs", - "rev": "838eefb4f93f2306d4614aafb9b2375f315d917f", - "sha256": "1bm8cmh1wx4h8b4fhbs75hjci3gcrpi7k1m1pmiy3nc0gjim9vkg", + "rev": "c55096e021c6ab0be3945be2535b3b4324e4f571", + "sha256": "0smvw72cv80zq1y1y5vjfjbz0bv6mg8iznhv779s2vn5dz1s3kwx", "type": "tarball", - "url": "https://github.com/NixOS/nixpkgs/archive/838eefb4f93f2306d4614aafb9b2375f315d917f.tar.gz", + "url": "https://github.com/NixOS/nixpkgs/archive/c55096e021c6ab0be3945be2535b3b4324e4f571.tar.gz", "url_template": "https://github.com///archive/.tar.gz" }, "nixus": { @@ -41,10 +41,10 @@ "homepage": "", "owner": "Infinisil", "repo": "nixus", - "rev": "d1e1057a31f16a75d9f871e311c4aaaf664561b9", - "sha256": "0d4576dssr6l4vdpi86rbf6dyn3jfl3csvmn9csd4n6dj53f5pqm", + "rev": "a7b742f2f4c9d37cd84b8f0ab7ee57c4b3d9f393", + "sha256": "0pyplivs96vxnnnj3w8drd806xxzhrxcn969hh1bhbds4h4s5k16", "type": "tarball", - "url": "https://github.com/Infinisil/nixus/archive/d1e1057a31f16a75d9f871e311c4aaaf664561b9.tar.gz", + "url": "https://github.com/Infinisil/nixus/archive/a7b742f2f4c9d37cd84b8f0ab7ee57c4b3d9f393.tar.gz", "url_template": "https://github.com///archive/.tar.gz" } }