diff options
| author | sils <sils@sils.li> | 2023-11-19 22:55:52 +0100 |
|---|---|---|
| committer | sils <sils@sils.li> | 2023-11-19 22:55:52 +0100 |
| commit | 1db30285e1b09a425dc78ac6a4881d5a4e24648c (patch) | |
| tree | cee543368dca729e4470426387ba1a95989b563b | |
| parent | feat(treewide): use agenix for wifi-passwords (diff) | |
| download | nix-config-1db30285e1b09a425dc78ac6a4881d5a4e24648c.tar.gz nix-config-1db30285e1b09a425dc78ac6a4881d5a4e24648c.zip | |
feat(sys/services): add openssh
This is only needed for agenix. I'll probably remove that overhead in future.
| -rw-r--r-- | sys/services/default.nix | 1 | ||||
| -rw-r--r-- | sys/services/openssh/default.nix | 17 |
2 files changed, 18 insertions, 0 deletions
diff --git a/sys/services/default.nix b/sys/services/default.nix index 31a958f..8e6fcbb 100644 --- a/sys/services/default.nix +++ b/sys/services/default.nix @@ -3,6 +3,7 @@ ./fwupd ./greetd ./logind + ./openssh ./pcscd ./printing ./tlp diff --git a/sys/services/openssh/default.nix b/sys/services/openssh/default.nix new file mode 100644 index 0000000..7a96441 --- /dev/null +++ b/sys/services/openssh/default.nix @@ -0,0 +1,17 @@ +{...}: { + services.openssh = { + enable = true; + allowSFTP = false; + openFirewall = false; + settings = { + PermitRootLogin = "no"; + }; + hostKeys = [ + { + path = "/srv/var/lib/sshd/ssh_host_ed25519_key"; + rounds = 1000; + type = "ed25519"; + } + ]; + }; +} |