mio-ops/profiles/openssh.nix

22 lines
424 B
Nix

# SSH service configuration common to all hosts
{
config,
pkgs,
lib,
...
}: {
services.openssh = {
enable = true; # Enable the OpenSSH daemon.
permitRootLogin = "prohibit-password";
kbdInteractiveAuthentication = false;
passwordAuthentication = false;
openFirewall = true;
hostKeys = [
{
path = "/etc/ssh/ssh_host_ed25519_key";
type = "ed25519";
}
];
};
}