Add nix flakes by default; firewall on; use correct port for ssh

cardano-scaling · Nov 18, 2024 · 6ab48f2 · 6ab48f2
1 parent 64e9220
commit 6ab48f2
Show file tree

Hide file tree

Showing 2 changed files with 47 additions and 39 deletions.
diff --git a/flake.lock b/flake.lock
diff --git a/nix/hydra-explorer-configuration.nix b/nix/hydra-explorer-configuration.nix
@@ -13,11 +13,20 @@
   networking = {
     hostName = "hydra-explorer";
     firewall = {
-      allowedTCPPorts = [ 25 80 443 ];
-      enable = false;
+      allowedTCPPorts = [ 22 80 443 ];
+      enable = true;
     };
   };
 
+  nix = {
+    settings.trusted-users = [ "root" ];
+    extraOptions = ''
+      experimental-features = nix-command flakes recursive-nix ca-derivations
+      log-lines = 300
+      warn-dirty = false
+    '';
+  };
+
   users.users.root = {
     initialPassword = ""; # No password
     openssh.authorizedKeys.keys = [
@@ -30,7 +39,6 @@
 
   services.getty.autologinUser = "root";
 
-  nix.settings.trusted-users = [ "root" ];
 
   services.cardano-node = {
     enable = true;