xyno/nix-configs
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

change to releases

Browse source
This commit is contained in:
Philipp Hochkamp 2023-02-06 22:01:37 +01:00
parent bfb1842988
commit 0a759cc943
4 changed files with 43 additions and 34 deletions
Download patch file Download diff file Expand all files Collapse all files

4
nixos-modules/services/ssh.nix
View file

@ -6,9 +6,9 @@ in
{
options.ragon.services.ssh.enable = lib.mkEnableOption "Enables sshd";
config = lib.mkIf cfg.enable {
services.openssh.settings.PermitRootLogin = "without-password";
services.openssh.permitRootLogin = "without-password";
services.openssh.enable = true;
services.openssh.settings.PasswordAuthentication = false;
services.openssh.passwordAuthentication = false;
users.users.root.openssh.authorizedKeys.keys = pubkeys.ragon.user;
};
}

5
nixos-modules/system/security.nix
View file

@ -11,8 +11,9 @@ in
config = mkIf cfg.enable {
security.sudo.execWheelOnly = true;
services.openssh = {
settings.PasswordAuthentication = false;
settings.KbdInteractiveAuthentication = false;
passwordAuthentication = false;
allowSFTP = true; # just use rsync, lol
kbdInteractiveAuthentication = false;
extraConfig = ''
AllowTcpForwarding yes
X11Forwarding no