reciproka-ops/profiles/openssh.nix

24 lines
454 B
Nix
Raw Permalink Normal View History

2021-10-07 02:13:48 +00:00
# SSH service configuration common to all hosts
{
config,
pkgs,
lib,
...
}: {
2021-10-07 02:13:48 +00:00
services.openssh = {
enable = true; # Enable the OpenSSH daemon.
2021-10-07 02:13:48 +00:00
openFirewall = true;
hostKeys = [
{
path = "/etc/ssh/ssh_host_ed25519_key";
type = "ed25519";
}
];
settings = {
KbdInteractiveAuthentication = false;
PasswordAuthentication = false;
PermitRootLogin = "prohibit-password";
};
2021-10-07 02:13:48 +00:00
};
}