toph - Unnamed repository; edit this file 'description' to name the repository.

	Commit message (Collapse)	Author	Files	Lines
2020-11-23	vps.scm: Add unattended-upgrade-service-type to the service list	EuAndreh	1	-0/+1

2020-11-22	vps.scm: Add mcron-service-type with empyt list of jobs	EuAndreh	1	-2/+5

2020-11-22	vps.scm: Add git package	EuAndreh	1	-1/+2
	For using git push commands
2020-11-16	vps.scm: Change locale to fr_FR.UTF-8	EuAndreh	1	-1/+1

2020-11-16	rsync the full folder to home instead of file by file	EuAndreh	1	-2/+3

2020-11-16	vps.scm: Remove comment from generated OS configuration	EuAndreh	1	-3/+0

2020-11-16	vps.scm: Stop inlining content of sudoers file	EuAndreh	1	-3/+5

2020-11-16	Add base Guix configuration and start switching to it	EuAndreh	1	-0/+53
	- remove NixOS stateVersion from .envrc; - add guix-reconfigure.sh; - add vps.scm with initial Guix system configuration; - update vps.tf to use the new "base-guix" snapshot. The "base-guix" image doesn't need a password. The "andreh" users has one, but it is configured for not requiring it when running commands as "sudo". The expected minimal steps one has to go through for privilege scalation is via the SSH private key, and accessing the VPS via SSH. Since password login is disabled and root can't login via SSH either, only the private SSH key allows access to the server. After that, the attacker will be able to run commands as root.