mio-ops/profiles/openssh.nix
2021-03-03 15:52:21 +10:00

22 lines
432 B
Nix

# SSH service configuration common to all hosts
{ config, pkgs, lib, ... }:
{
services.openssh = {
enable = true; # Enable the OpenSSH daemon.
permitRootLogin = "prohibit-password";
challengeResponseAuthentication = false;
passwordAuthentication = false;
openFirewall = true;
hostKeys = [
{
path = "/etc/ssh/ssh_host_ed25519_key";
type = "ed25519";
}
];
};
}