sercanto/mio-ops
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Activity

Correct ssh settings

Browse source
This commit is contained in:
Serĉanto de Scio 2019-07-03 23:00:17 +10:00
parent 4c7b90f0f1
commit 08741fad2e
Signed by: sercanto
GPG key ID: A4122FF3971B6865
1 changed files with 33 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

35
Deployments/host_common.nix
View file

@ -21,19 +21,48 @@
nix.gc.dates = "weekly"; nix.gc.dates = "weekly";
nix.gc.options = "--delete-older-than 90d"; nix.gc.options = "--delete-older-than 90d";
# Set the system-wide environment
environment = {
systemPackages = with pkgs; [
byobu # text-based window manager and terminal multiplexer.
htop # interactive process viewer
tmux # Terminal multiplexer required by byobu
];
};
# Program defauls for Linode VMs # Program defauls for Linode VMs
programs.zsh = { programs.zsh = {
enable = true; enable = true;
autosuggestions = { autosuggestions = {
enable = true; enable = true;
}; };
ohMyZsh = } # List of strings concatenated with "\n"
#loginShellInit = ''
# _byobu_sourced=1 . byobu-tmux 2>/dev/null || true
#'';
ohMyZsh = {
enable = true; enable = true;
}; };
}; };
programs.mosh = {
enable = true;
withUtempter = true;
};
# List services that you want to enable: # List services that you want to enable:
services.openssh.enable = true; # Enable the OpenSSH daemon. services.openssh = {
enable = true; # Enable the OpenSSH daemon.
permitRootLogin = "without-password";
challengeResponseAuthentication = false;
passwordAuthentication = false;
openFirewall = true;
hostKeys = [
{
path = "/etc/ssh/ssh_host_ed25519_key";
type = "ed25519";
}
];
};
# Set the default shell for all users # Set the default shell for all users
users.defaultUserShell = "/run/current-system/sw/bin/zsh"; users.defaultUserShell = "/run/current-system/sw/bin/zsh";
@ -42,6 +71,7 @@
users.mutableUsers = false; # Remove any users not defined in here users.mutableUsers = false; # Remove any users not defined in here
users.users.root = { users.users.root = {
hashedPassword = "$6$yak.T2uXItw5j2tU$E5kW9iDMXBc86voxJjxnrUcY0DrW/7WaQY0aGZ5sIJ2JPYZOhDslTKqOYK8sDSJGhM/mCxjPbJq4JGFsObN7D1";
openssh.authorizedKeys.keys = [ openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDtjE0YstRzlh+Zhlj03th9DYOkMqJ5xHUcderBq151K craige@mcwhirter.io" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDtjE0YstRzlh+Zhlj03th9DYOkMqJ5xHUcderBq151K craige@mcwhirter.io"
]; ];
@ -56,6 +86,7 @@
uid = 1000; uid = 1000;
group = "craige"; group = "craige";
extraGroups = ["wheel" ]; extraGroups = ["wheel" ];
hashedPassword = "$6$ZNvCXNzwtdeV0pd$iKraghNGImwzx3IhVk6.wi6Bl7yFS6jLbxm9zeE4xq6.WLkYtVnnP323bstos8sVhD4L9Z21gMGVY3MLtmvlH0";
openssh.authorizedKeys.keys = [ openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDtjE0YstRzlh+Zhlj03th9DYOkMqJ5xHUcderBq151K craige@mcwhirter.io" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDtjE0YstRzlh+Zhlj03th9DYOkMqJ5xHUcderBq151K craige@mcwhirter.io"
]; ];