mathieu/system-config
1
0
Fork 0
Code Issues Packages Activity Actions

Enable source validation
All checks were successful
ShellCheck / shellcheck (push) Successful in 21s
Details

Browse source
This commit is contained in:
Mathieu Strypsteen 2024-09-24 21:36:10 +02:00
parent 2129038172
commit 57a46ae5ba
Signed by: mathieu
GPG key ID: 782A42E461BC6824
3 changed files with 6 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
containers/code-server/Containerfile
View file

@ -1,7 +1,7 @@
FROM quay.io/fedora/fedora-toolbox:41
RUN dnf up -y
RUN dnf install -y bash-color-prompt clang gcc hyperfine java-devel libvirt llvm mtools nodejs-npm openssl-devel parted poetry postgresql-server python3-ipykernel python3-pip qemu-system-x86-core rustup systemd-container vim-enhanced
RUN dnf install -y https://github.com/coder/code-server/releases/download/v4.93.1-rc.1/code-server-4.93.1-rc.1-amd64.rpm
RUN dnf install -y https://github.com/coder/code-server/releases/download/v4.93.1/code-server-4.93.1-amd64.rpm
RUN mkdir /etc/systemd/system/user@.service.d
RUN mkdir /var/lib/systemd/linger
RUN touch /var/lib/systemd/linger/coder

1
laptop/etc/NetworkManager/NetworkManager.conf
View file

@ -1,3 +1,4 @@
[connection]
ipv6.ip6-privacy=2
wifi.cloned-mac-address=random
wifi.powersave=2

5
setup-vyos.sh
View file

@ -63,7 +63,7 @@ set service dns forwarding allow-from 127.0.0.1/32
set service dns forwarding allow-from 192.168.0.0/16
set service tftp-server directory /config/tftp
set service tftp-server listen-address 192.168.253.1
set service monitoring telegraf influxdb url http://home.strypsteen.com
set service monitoring telegraf influxdb url http://home.server.home.arpa
set service monitoring telegraf influxdb bucket vyos
set service monitoring telegraf influxdb authentication organization metrics
@ -72,6 +72,9 @@ set nat source rule 1 translation address masquerade
set nat66 source rule 1 outbound-interface name eth0
set nat66 source rule 1 translation address masquerade
set firewall global-options source-validation strict
set firewall global-options ipv6-source-validation strict
firewall_types="ipv4 ipv6"
for i in ${firewall_types}; do