Added attributes for openssh

This commit is contained in:
Serĉanto de Scio 2019-12-11 00:44:55 +10:00
parent 569426933f
commit 241c98eb32
Signed by: sercanto
GPG key ID: A4122FF3971B6865

21
roles/openssh.nix Normal file
View file

@ -0,0 +1,21 @@
# SSH service configuration common to all hosts
{ config, pkgs, lib, ... }:
{
services.openssh = {
enable = true; # Enable the OpenSSH daemon.
permitRootLogin = "without-password";
challengeResponseAuthentication = false;
passwordAuthentication = false;
openFirewall = true;
hostKeys = [
{
path = "/etc/ssh/ssh_host_ed25519_key";
type = "ed25519";
}
];
};
}