lilith/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

ssh-remote

Browse source
This commit is contained in:
Lilith 2025-03-17 19:11:32 +01:00
parent 56ea69ea23
commit a22cc6450e
Signed by: lilith
GPG key ID: 8712A0F317C37175
5 changed files with 74 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

19
system/core/ssh.nix
View file

@ -1,11 +1,24 @@
{...}: {
networking.firewall.allowedTCPPorts = [22];
{ ... }:
{
networking.firewall.allowedTCPPorts = [ 22 ];
sops.secrets."ssh/nixremote/private" = {
sopsFile = ../../secrets/default.yaml;
path = "/root/.ssh/nixremote";
};
services.openssh = {
enable = true;
ports = [22];
ports = [ 22 ];
settings = {
PermitRootLogin = "no";
PasswordAuthentication = false;
};
extraConfig = ''
Host lilith-server-builder
HostName 2a01:4f9:4a:1ecb::2
User nixremote
IdentityFile /root/.ssh/nixremote
'';
};
}