fi/nix-infra
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Use OpenSSH config from CCCHH nix-infra repo

Browse source
This commit is contained in:
fi 2023-10-10 16:43:51 +02:00
parent 578abdf26e
commit 3708003da6
Signed by: fi
SSH key fingerprint: SHA256:d+6fQoDPMbSFK95zRVflRKZLRKF4cPSQb7VIxYkhFsA
2 changed files with 44 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

13
config/common/default.nix
View file

@ -1,8 +1,9 @@
{ pkgs, lib, ... }:
{ pkgs, ... }:
{
imports = [
./prometheus-node-exporter.nix
./nginx.nix
./openssh.nix
../users/colmena-deploy
../users/yuri
];
@ -36,16 +37,6 @@
tcpdump
];
services.openssh = {
enable = true;
openFirewall = true;
settings = {
PasswordAuthentication = false;
KbdInteractiveAuthentication = false;
PermitRootLogin = lib.mkForce "no";
};
};
security.acme = {
defaults.email = "acme@grzb.de";
acceptTerms = true;