mio-ops/profiles/openssh.nix

24 lines
454 B
Nix
Raw Permalink Normal View History

2019-12-10 14:44:55 +00:00
# SSH service configuration common to all hosts
{
2022-03-07 14:26:15 +00:00
config,
pkgs,
lib,
...
}: {
2019-12-10 14:44:55 +00:00
services.openssh = {
2021-11-16 04:57:23 +00:00
enable = true; # Enable the OpenSSH daemon.
2022-03-07 14:26:15 +00:00
hostKeys = [
{
path = "/etc/ssh/ssh_host_ed25519_key";
type = "ed25519";
}
];
openFirewall = true;
settings = {
KbdInteractiveAuthentication = false;
PasswordAuthentication = false;
PermitRootLogin = "prohibit-password";
};
2019-12-10 14:44:55 +00:00
};
}