foodogsquared/nixos-config
1
0
Fork 0
mirror of https://github.com/foo-dogsquared/nixos-config.git synced 2025-02-07 06:19:00 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

config: add comments

Browse Source
This commit is contained in:
Gabriel Arazas 2023-09-28 18:33:00 +08:00
parent 013f751ea4
commit 8e91973c70
No known key found for this signature in database
GPG Key ID: ADE0C41DAB221FCC
2 changed files with 10 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
flake.nix
View File

@ -87,6 +87,12 @@
# The order here is important(?).
overlays = [
# My own set of Firefox addons. They're not included in the packages
# output since they'll be a pain in the ass to set up for others when
# this is also included. If I set this up to be easily included in
# others' flake, it'll have a potential conflict for NUR users
# (including myself) that also relies on rycee's NUR instance. Overall,
# it's a pain to setup so I'm not including this.
(final: prev: {
inherit (inputs.firefox-addons.lib.${defaultSystem}) buildFirefoxXpiAddon;
firefox-addons = final.callPackage ./pkgs/firefox-addons { };

7
hosts/plover/modules/services/bind.nix
View File

@ -130,6 +130,8 @@ in
allow-query { any; };
allow-recursion { any; };
// We'll use systemd-resolved as our forwarder.
forwarders { 127.0.0.53 port 53; };
zone "${fqdn}" {
@ -184,9 +186,8 @@ in
'';
serviceConfig = {
# Additional service hardening. You can see most of the options
# from systemd.exec(5) manual.
# Run it as an unprivileged user.
# Additional service hardening. You can see most of the options from
# systemd.exec(5) manual. Run it as an unprivileged user.
User = config.users.users.named.name;
Group = config.users.users.named.group;
UMask = "0037";