diff --git a/site/index.html b/site/index.html
index 580e959..365ab7c 100755
--- a/site/index.html
+++ b/site/index.html
@@ -47,14 +47,14 @@
We provide a plethora of services, available through either TOR or the clearnet. These include (and are limited to):
- All services have a strict no-logs and no-metrics policy. Where it is difficult to configure this in a service, logs are directly piped and/or symlinked to /dev/null.
+ All services have a strict no-metrics policy, with logs being kept for at most 1 hour (for debugging purposes). Where it is difficult to configure this in a service, logs are directly piped and/or symlinked to /dev/null.
The server runs a hardened NixOS config, and is updated when appropriate for any security/hardening tweaks. This NixOS config is auditable and freely accessible over TOR and clearnet.
If you are interested, email me with your desired username.
diff --git a/system/configuration.nix b/system/configuration.nix
index 68bb0d3..9a24111 100644
--- a/system/configuration.nix
+++ b/system/configuration.nix
@@ -26,6 +26,35 @@ in {
};
};
- users.users.root.openssh.authorizedKeys.keys = ["ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHxah5pnxmk=P7HtwRsryDoAHZsDs5RcGP9IPCNg1KFe cardno;16-179-196"];
+ users.users.root.hashedPassword = "!";
+ users.users.anon = {
+ isNormalUser = true;
+ extraGroups = ["wheel"];
+ hashedPassword = "$6$GAyfgaTQgaBipAbb$gF/9YBh2ucVa/9vDQvEu9DVjSbsqdvSoXwA5RX0kP7.xdCfLqXhGBLlSXHg0e4rkLLd6zI1gRTWd4TfMjnnpS/";
+ openssh.authorizedKeys.keys = ["ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHxah5pnxmk+P7HtwRsryDoAHZsDs5RcGP9IPCNg1KFe cardno:16_179_196"];
+ };
+ security.sudo.wheelNeedsPassword = true;
+
+ systemd = {
+ services.clear-var-log = {
+ description = "Clear /var/log directory";
+ serviceConfig = {
+ Type = "oneshot";
+ ExecStart = "${pkgs.coreutils}/bin/rm -rf /var/log/*";
+ User = "root";
+ Group = "root";
+ };
+ };
+ timers.clear-var-log = {
+ description = "Hourly timer to clear /var/log";
+ wants = ["clear-var-log.service"];
+ timerConfig = {
+ OnCalendar = "hourly";
+ Persistent = true;
+ Unit = "clear-var-log.service";
+ };
+ };
+ };
+
system.stateVersion = "25.05";
}
diff --git a/system/networking.nix b/system/networking.nix
index c6c626e..82b6718 100644
--- a/system/networking.nix
+++ b/system/networking.nix
@@ -3,10 +3,10 @@
# details gathered from the active system.
networking = {
nameservers = [
- "213.136.95.10"
- "213.136.95.11"
- "2a02:c207::1"
- "8.8.8.8"
+ "9.9.9.9"
+ "149.112.112.112"
+ "2620:fe::fe"
+ "2620:fe::9"
];
defaultGateway = "157.173.112.1";
defaultGateway6 = {