ooks/ooknet
0
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refactor: flake dir -> outputs/sys -> nixos

Browse source
This commit is contained in:
ooks-io 2024-06-08 23:06:08 +12:00
parent 3615bb010f
commit a6d5e892a1
73 changed files with 9 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

39
sys/modules/base/networking/ssh.nix
View file

@ -1,39 +0,0 @@
{ lib, config, ... }:
let
inherit (lib) mkIf mkDefault;
key = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBn3ff3HaZHIyH4K13k8Mwqu/o7jIABJ8rANK+r2PfJk";
phoneKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINredx07UAk2l1wUPujYnmJci1+XEmcUuSX0DIYg6Vzz";
host = config.ooknet.host;
in
{
config = mkIf (host.type != "phone") {
environment.sessionVariables.SSH_AUTH_SOCK = "~/.1password/agent.sock";
services.openssh = {
enable = true;
settings = {
UseDns = false;
PasswordAuthentication = false;
AuthenticationMethods = "publickey";
UsePAM = false;
PermitRootLogin = "no";
StreamLocalBindUnlink = "yes";
KbdInteractiveAuthentication = mkDefault false;
};
};
programs = {
ssh = {
knownHosts = {
"192.168.1.36".publicKey = phoneKey;
};
};
gnupg.agent = {
enable = true;
enableSSHSupport = true;
};
};
};
}