diff options
author | sils <sils@sils.li> | 2023-11-19 22:55:52 +0100 |
---|---|---|
committer | sils <sils@sils.li> | 2023-11-19 22:55:52 +0100 |
commit | 1db30285e1b09a425dc78ac6a4881d5a4e24648c (patch) | |
tree | cee543368dca729e4470426387ba1a95989b563b /sys/services/openssh | |
parent | feat(treewide): use agenix for wifi-passwords (diff) | |
download | nix-config-1db30285e1b09a425dc78ac6a4881d5a4e24648c.tar.gz nix-config-1db30285e1b09a425dc78ac6a4881d5a4e24648c.zip |
feat(sys/services): add openssh
This is only needed for agenix. I'll probably remove that overhead in future.
Diffstat (limited to '')
-rw-r--r-- | sys/services/openssh/default.nix | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/sys/services/openssh/default.nix b/sys/services/openssh/default.nix new file mode 100644 index 0000000..7a96441 --- /dev/null +++ b/sys/services/openssh/default.nix @@ -0,0 +1,17 @@ +{...}: { + services.openssh = { + enable = true; + allowSFTP = false; + openFirewall = false; + settings = { + PermitRootLogin = "no"; + }; + hostKeys = [ + { + path = "/srv/var/lib/sshd/ssh_host_ed25519_key"; + rounds = 1000; + type = "ed25519"; + } + ]; + }; +} |