ooks/ooknet
0
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refactor(networking): split networking into modules

Browse source
This commit is contained in:
ooks-io 2024-04-09 20:52:14 +12:00
parent 4a177d2122
commit 221d9e3e33
8 changed files with 227 additions and 30 deletions
Download patch file Download diff file Expand all files Collapse all files

32
system/modules/ssh.nix
View file

@ -1,32 +0,0 @@
{ lib, config, ... }:
let
cfg = config.systemModules.openssh;
key = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBn3ff3HaZHIyH4K13k8Mwqu/o7jIABJ8rANK+r2PfJk";
in
{
options.systemModules = {
openssh = {
enable = lib.mkEnableOption "enable openssh system module";
};
};
config = lib.mkIf cfg.enable {
environment.sessionVariables.SSH_AUTH_SOCK = "~/.1password/agent.sock";
users.users.ooks.openssh.authorizedKeys.keys = [ key ];
services.openssh = {
enable = true;
settings = {
UseDns = true;
PasswordAuthentication = false;
PermitRootLogin = "no";
StreamLocalBindUnlink = "yes";
};
};
};
}