ssh

system/default.nix

@@ -10,6 +10,7 @@
     ./fonts.nix
     ./nix.nix
     ./users.nix
+    ./ssh.nix
     ./steam.nix
   ];
 

system/sops.nix

@@ -0,0 +1,2 @@
+{...}: {
+}

system/ssh.nix

@@ -0,0 +1,9 @@
+{...}: {
+  services.openssh = {
+    enable = true;
+    settings = {
+      PermitRootLogin = "no";
+      PasswordAuthentication = false;
+    };
+  };
+}

system/users.nix

@@ -9,7 +9,7 @@
       isNormalUser = true;
       uid = conf.uid;
       extraGroups = ["wheel" "networkmanager"];
-      hashedPasswordFile = config.sops.secrets."user/hashedPassword".path;
+      hashedPasswordFile = config.sops.secrets."user/password".path;
     };
   };