blob: d7f01cff335f6146a54cadd14308211e8d9a3fa3 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
|
{
config,
lib,
pkgs,
...
}: let
cfg = config.vhack.rust-motd;
# List all users that can login
pred = n: v: (
false # <- just here for neat formatting
|| v.initialHashedPassword != null
|| v.initialPassword != null
|| v.hashedPassword != null
|| v.hashedPasswordFile != null
|| v.password != null
|| v.passwordFile != null
|| v.openssh.authorizedKeys.keys != []
|| v.openssh.authorizedKeys.keyFiles != []
);
userList = builtins.mapAttrs (n: v: 2) (lib.filterAttrs pred config.users.users);
bannerFile =
pkgs.runCommandNoCCLocal "banner-file" {
nativeBuildInputs = [pkgs.figlet];
} ''
echo "${config.system.name}" | figlet -f slant > "$out"
'';
in {
options.vhack.rust-motd = {
enable = lib.mkEnableOption "rust-motd";
};
config = lib.mkIf cfg.enable {
systemd.services.rust-motd = {
path = with pkgs; [
bash
fail2ban # Needed for rust-motd fail2ban integration
];
};
programs.rust-motd = {
enable = true;
enableMotdInSSHD = true;
refreshInterval = "*:0/5"; # 0/5 means: hour 0 AND all hour wich match (0 + 5 * x) (is the same as: 0, 5, 10, 15, 20)
# An example is here: https://raw.githubusercontent.com/rust-motd/rust-motd/refs/heads/main/example_config.toml
settings = {
global = {
progress_full_character = "=";
progress_empty_character = "-";
progress_prefix = "[";
progress_suffix = "]";
time_format = "%Y-%m-%d %H:%M:%S";
};
banner = {
color = "red";
# Avoid some runtime dependencies.
command = "cat ${bannerFile}";
};
uptime = {
prefix = "Uptime:";
};
filesystems = {
root = "/";
persistent = "/srv";
store = "/nix";
boot = "/boot";
};
memory = {
swap_pos = "beside"; # or "below" or "none"
};
fail2_ban = {
jails = ["sshd"]; #, "anotherjail"]
};
last_login = userList;
last_run = {};
};
};
};
}
|
