37 lines
1.1 KiB
Nix
37 lines
1.1 KiB
Nix
{ pkgs, config, lib, ... }: {
|
|
services.openssh = {
|
|
enable = true;
|
|
passwordAuthentication = false;
|
|
permitRootLogin = "no";
|
|
forwardX11 = true;
|
|
extraConfig = "StreamLocalBindUnlink yes";
|
|
ports = [ 22 ];
|
|
};
|
|
|
|
persist.state.etcFiles = [
|
|
"ssh/ssh_host_ed25519_key"
|
|
"ssh/ssh_host_ed25519_key.pub"
|
|
"ssh/ssh_host_rsa_key"
|
|
"ssh/ssh_host_rsa_key.pub"
|
|
];
|
|
|
|
persist.state.directories = [ "/home/balsoft/.ssh" ];
|
|
|
|
users.users.balsoft.openssh.authorizedKeys.keys =
|
|
["ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDd2OdcSHUsgezuV+cpFqk9+Svtup6PxIolv1zokVZdqvS8qxLsA/rwYmQgTnuq4/zK/GIxcUCH4OxYlW6Or4M4G7qrDKcLAUrRPWkectqEooWRflZXkfHduMJhzeOAsBdMfYZQ9024GwKr/4yriw2BGa8GbbAnQxiSeTipzvXHoXuRME+/2GsMFAfHFvxzXRG7dNOiLtLaXEjUPUTcw/fffKy55kHtWxMkEvvcdyR53/24fmO3kLVpEuoI+Mp1XFtX3DvRM9ulgfwZUn8/CLhwSLwWX4Xf9iuzVi5vJOJtMOktQj/MwGk4tY/NPe+sIk+nAUKSdVf0y9k9JrJT98S/ comment"];
|
|
|
|
secrets.ssh_key = {
|
|
services = [];
|
|
decrypted = "/root/.ssh/id_ed25519";
|
|
};
|
|
|
|
home-manager.users.balsoft.programs.ssh = {
|
|
enable = true;
|
|
matchBlocks = {
|
|
"*" = {
|
|
compression = false;
|
|
};
|
|
};
|
|
};
|
|
}
|