Monorepo for Tangled
tangled.org
nix: add secureMode and timesyncd to vm
Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.org>
author
Anirudh Oppiliappan
committer
Tangled
date
(Jun 12, 2026, 12:22 PM +0300)
commit
e5c6b73c
e5c6b73c372003e513b3a36878264a8b669fabaa
parent
0a75f8a0
0a75f8a0c3b17b83ab6e3f649c20de87af54b142
change-id
kxpzqouq
kxpzqouqlzptnuqqystkknunvmslmrxr
+3
+3
nix/vm.nix
+3
nix/vm.nix
···
103
103
};
104
104
# This is fine because any and all ports that are forwarded to host are explicitly marked above, we don't need a separate guest firewall
105
105
networking.firewall.enable = false;
106
+
services.timesyncd.enable = lib.mkForce true;
106
107
time.timeZone = "Europe/London";
107
108
services.getty.autologinUser = "root";
108
109
environment.systemPackages = with pkgs; [curl vim git sqlite litecli postgresql_14];
···
110
111
enable = true;
111
112
motd = "Welcome to the development knot!\n";
112
113
server = {
114
+
secureMode = false;
113
115
owner = envVar "TANGLED_VM_KNOT_OWNER";
114
116
hostname = envVarOr "TANGLED_VM_KNOT_HOST" "localhost:6444";
115
117
plcUrl = plcUrl;
···
155
157
};
156
158
services.tangled.knotmirror = {
157
159
enable = true;
160
+
knotSSRF = false;
158
161
listenAddr = "0.0.0.0:7000";
159
162
metricsListenAddr = "0.0.0.0:7100";
160
163
adminListenAddr = "0.0.0.0:7200";