"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAyqscjK+LsOvAMbIyDtIoWAZwTeDLv9Mu9WAlDUPLyL"
];
};
+ users.users.mcserver = {
+ isSystemUser = true;
+ group = "mcserver";
+ home = "/srv/mcserver";
+ openssh.authorizedKeys.keys = [
+ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICtL2eG098LhkFPR4N5e44XMq60uvCUCOuKMYs5zjg6f"
+ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAyqscjK+LsOvAMbIyDtIoWAZwTeDLv9Mu9WAlDUPLyL"
+ ];
+ };
services.gitDaemon = {
enable = true;
users.groups.git = {};
- networking.firewall.allowedTCPPorts = [ 80 443 9418 ];
+ networking.firewall.allowedTCPPorts = [ 80 443 9418 53 ];
+ networking.firewall.allowedUDPPorts = [ 53 ];
+
systemd.tmpfiles.rules = [
"d /srv/git 755 git git - -"