ooks/ooknet
0
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refactor(flake-parts): initial flake-parts configuration

Browse source
This commit is contained in:
ooks-io 2024-05-13 22:50:56 +12:00
parent 8f67be9e68
commit 5603001d65
230 changed files with 380 additions and 717 deletions
Download patch file Download diff file Expand all files Collapse all files

39
inputs/system/modules/base/networking/ssh/default.nix Normal file
View file

@ -0,0 +1,39 @@
{ lib, config, ... }:
let
inherit (lib) mkIf mkDefault;
key = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBn3ff3HaZHIyH4K13k8Mwqu/o7jIABJ8rANK+r2PfJk";
phoneKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINredx07UAk2l1wUPujYnmJci1+XEmcUuSX0DIYg6Vzz";
host = config.systemModules.host;
in
{
config = mkIf (host.type != "phone") {
environment.sessionVariables.SSH_AUTH_SOCK = "~/.1password/agent.sock";
services.openssh = {
enable = true;
settings = {
UseDns = false;
PasswordAuthentication = false;
AuthenticationMethods = "publickey";
UsePAM = false;
PermitRootLogin = "no";
StreamLocalBindUnlink = "yes";
KbdInteractiveAuthentication = mkDefault false;
};
};
programs = {
ssh = {
knownHosts = {
"192.168.1.36".publicKey = phoneKey;
};
};
gnupg.agent = {
enable = true;
enableSSHSupport = true;
};
};
};
}