server - Setup and configuration for VPS and other personal server

	Commit message (Collapse)	Author	Age	Files	Lines
*	Move VPS files into vps/	EuAndreh	2021-02-21	1	-376/+0
\|
*	vps.scm: Remove duplicate user	EuAndreh	2021-02-19	1	-1/+1
\|
*	vps.scm: Correct indentation	EuAndreh	2021-02-19	1	-2/+2
\|
*	vps.scm: Move (cmd) definition to before reader macro	EuAndreh	2021-02-19	1	-6/+6
\|
*	Update aux/guix/pinned-channels.scm	EuAndreh	2021-02-19	1	-10/+3
\|
*	vps.scm: Remove generage-ci-html	EuAndreh	2021-02-19	1	-99/+0
\|
*	vps.scm: Remove ^L and indent	EuAndreh	2021-01-26	1	-6/+1
\|
*	vps.scm: Stop inlining SSH public key, use symlink instead	EuAndreh	2021-01-25	1	-4/+1
\|
*	TODOs.md: Add FTP server to services list	EuAndreh	2021-01-17	1	-2/+1
\|
*	TODOs.rst: Add df87e340-4c35-469a-9bc1-fc57429a0b8e	EuAndreh	2021-01-16	1	-3/+1
\|
*	TODOs.rst: Add 723d9fcd-fdec-4f57-b774-2ed20599a714	EuAndreh	2021-01-16	1	-0/+1
\|
*	vps.scm: Uncomment services	EuAndreh	2021-01-15	1	-5/+2
\|
*	vps.scm: Remove unused DNS prefixes	EuAndreh	2021-01-15	1	-4/+2
\|
*	vps.scm: Add "static" domain prefix	EuAndreh	2021-01-15	1	-3/+4
\|
*	vps.scm: Working machine declaration with Guix Deploy	EuAndreh	2021-01-15	1	-28/+37
\|
*	vps.scm: WIP start adding (machine ...) configuration	EuAndreh	2021-01-15	1	-0/+12
\|
*	vps.scm: Move host-name to variable	EuAndreh	2021-01-15	1	-3/+3
\|
*	vps.scm: Attribute (operating-system ...) expression to "system" variable	EuAndreh	2021-01-15	1	-125/+128
\|
*	Move sync/* to .	EuAndreh	2021-01-15	1	-0/+472
\|
*	rsync the full folder to home instead of file by file	EuAndreh	2020-11-16	1	-52/+0
\|
*	vps.scm: Remove comment from generated OS configuration	EuAndreh	2020-11-16	1	-3/+0
\|
*	vps.scm: Stop inlining content of sudoers file	EuAndreh	2020-11-16	1	-3/+5
\|
*	Add base Guix configuration and start switching to it	EuAndreh	2020-11-16	1	-0/+53
	- remove NixOS stateVersion from .envrc; - add guix-reconfigure.sh; - add vps.scm with initial Guix system configuration; - update vps.tf to use the new "base-guix" snapshot. The "base-guix" image doesn't need a password. The "andreh" users has one, but it is configured for not requiring it when running commands as "sudo". The expected minimal steps one has to go through for privilege scalation is via the SSH private key, and accessing the VPS via SSH. Since password login is disabled and root can't login via SSH either, only the private SSH key allows access to the server. After that, the attacker will be able to run commands as root.