1
0
Fork 0

improvements

This commit is contained in:
Lukas Wurzinger 2024-02-21 22:08:11 +01:00
parent 13fab45975
commit ee100f5496
9 changed files with 52 additions and 56 deletions

View file

@ -1,4 +1,26 @@
{lib, ...}: {
environment.persistence."/persist".files = [
"/etc/ssh/ssh_host_ed25519_key"
"/etc/ssh/ssh_host_ed25519_key.pub"
];
age.identityPaths = ["/persist/etc/ssh/ssh_host_ed25519_key"];
services.openssh = {
enable = true;
openFirewall = true;
hostKeys = [
{
path = "/etc/ssh/ssh_host_ed25519_key";
type = "ed25519";
}
];
settings = {
PermitRootLogin = "no";
PasswordAuthentication = false;
};
};
programs.ssh.startAgent = true;
environment.etc."ssh/ssh_config".text = lib.mkAfter ''