puter/common/ssh.nix
2024-09-15 18:15:49 +02:00

19 lines
358 B
Nix

{
age.identityPaths = ["/etc/ssh/ssh_host_ed25519_key"];
services.openssh = {
enable = true;
openFirewall = true;
hostKeys = [
{
path = "/etc/ssh/ssh_host_ed25519_key";
type = "ed25519";
}
];
settings = {
PermitRootLogin = "forced-commands-only";
PasswordAuthentication = false;
};
};
}