Add 'old-conf/' from commit '62a64a79a8'

git-subtree-dir: old-conf
git-subtree-mainline: 4667974392
git-subtree-split: 62a64a79a8

old-conf/nixos-modules/system/security.nix

@@ -0,0 +1,27 @@
+{ config, lib, pkgs, ... }:
+with lib;
+with lib.my;
+let
+  cfg = config.ragon.system.security;
+in
+{
+  options.ragon.system.security = {
+    enable = mkBoolOpt true;
+  };
+  config = mkIf cfg.enable {
+    security.sudo.execWheelOnly = true;
+    services.openssh = {
+      settings.PasswordAuthentication = false;
+      allowSFTP = true; # just use rsync, lol
+      settings.KbdInteractiveAuthentication = false;
+      extraConfig = ''
+        AllowTcpForwarding yes
+        X11Forwarding no
+        AllowAgentForwarding no
+        AllowStreamLocalForwarding no
+        AuthenticationMethods publickey
+      '';
+    };
+
+  };
+}