clerie/nixfiles
1
0
Fork 0
Code Activity

profiles/common-ssh: Migrate common SSH config to profile and pin SSH public hosts keys for net.clerie.de

Browse Source
This commit is contained in:
clerie
2025-11-16 14:22:50 +01:00
parent 2d9836f793
commit f17a94c578
5 changed files with 31 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
configuration/common/default.nix
View File

@@ -8,7 +8,6 @@
./locale.nix
./networking.nix
./programs.nix
./ssh.nix
./systemd.nix
./user.nix
];

16
configuration/common/ssh.nix
View File

@@ -1,16 +0,0 @@
{ lib, ... }:
{
services.openssh.enable = true;
services.openssh.settings = {
PasswordAuthentication = false;
KbdInteractiveAuthentication = false;
PermitRootLogin = lib.mkDefault "no";
};
services.openssh.hostKeys = lib.mkForce [
# Only create ed25519 host keys
{ type = "ed25519"; path = "/etc/ssh/ssh_host_ed25519_key"; }
];
}