generation 491 25.11.20250714.62e0f05

2025-08-17 01:03:44 -04:00
parent 968b13f8ad
commit 5622a6dd4c
5 changed files with 104 additions and 0 deletions
--- a/hosts/server/ssh.nix
+++ b/hosts/server/ssh.nix
@@ -0,0 +1,19 @@
+{
+  config,
+  pkgs,
+  ...
+}: {
+  services.openssh.enable = true;
+
+  # Disable password login for security
+  services.openssh.settings.PasswordAuthentication = false;
+  services.openssh.settings.PermitRootLogin = "no";
+
+  # Add your authorized key for a specific user
+  users.users.yourusername = {
+    isNormalUser = true;
+    openssh.authorizedKeys.keys = [
+      config.age.secrets.ssh-pub
+    ];
+  };
+}