m/apex/configuration.nix

@@ -70,8 +70,6 @@
       # Blackhole BSC vulnerability scanner (OpenVAS) as it is spamming our
       # logs. Insert as first position so we also protect SSH.
       iptables -I nixos-fw 1 -p tcp -s 192.168.8.16 -j nixos-fw-refuse
-      # Same with opsmonweb01.bsc.es which seems to be trying to access via SSH
-      iptables -I nixos-fw 2 -p tcp -s 84.88.52.176 -j nixos-fw-refuse
     '';
   };
 

m/fox/configuration.nix

@@ -55,8 +55,8 @@
 
   # Configure Nvidia driver to use with CUDA
   hardware.nvidia.package = config.boot.kernelPackages.nvidiaPackages.production;
-  hardware.nvidia.open = true;
   hardware.graphics.enable = true;
+  nixpkgs.config.allowUnfree = true;
   nixpkgs.config.nvidia.acceptLicense = true;
   services.xserver.videoDrivers = [ "nvidia" ];
 

m/hut/targets.yml

@@ -4,7 +4,7 @@
   - xeon03-ipmi
   - xeon04-ipmi
   - koro-ipmi
-  - weasel-ipmi
+  - xeon06-ipmi
   - hut-ipmi
   - eudy-ipmi
   # Storage

m/module/ssh-hut-extern.nix

@@ -1,8 +1,9 @@
 {
   programs.ssh.extraConfig = ''
-    Host apex ssfhead
+    Host ssfhead
       HostName ssflogin.bsc.es
     Host hut
-      ProxyJump apex
+      ProxyJump ssfhead
+      HostName xeon07
   '';
 }

m/raccoon/configuration.nix

@@ -52,6 +52,7 @@
   # Configure Nvidia driver to use with CUDA
   hardware.nvidia.package = config.boot.kernelPackages.nvidiaPackages.production;
   hardware.graphics.enable = true;
+  nixpkgs.config.allowUnfree = true;
   nixpkgs.config.nvidia.acceptLicense = true;
   services.xserver.videoDrivers = [ "nvidia" ];