Add template host
This commit is contained in:
@@ -1,5 +1,5 @@
|
||||
{ ... }: {
|
||||
import = [
|
||||
imports = [
|
||||
./sops.nix
|
||||
./root-user.nix
|
||||
./sshd.nix
|
||||
|
@@ -6,7 +6,7 @@
|
||||
users.users.root = {
|
||||
shell = pkgs.zsh;
|
||||
hashedPasswordFile = config.sops.secrets.root_password_hash.path;
|
||||
opennsh.authorizedKeys.keys = [
|
||||
openssh.authorizedKeys.keys = [
|
||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAwfb2jpKrBnCw28aevnH8HbE5YbcMXpdaVv2KmueDu6 torjus@gunter"
|
||||
];
|
||||
};
|
||||
|
@@ -1,6 +1,6 @@
|
||||
{ ... }: {
|
||||
sops = {
|
||||
defaultSopsFile = ./secrets/secrets.yaml;
|
||||
defaultSopsFile = ../secrets/secrets.yaml;
|
||||
age.keyFile = "/var/lib/sops-nix/key.txt";
|
||||
age.generateKey = true;
|
||||
};
|
||||
|
@@ -1,9 +1,11 @@
|
||||
{ ... }: {
|
||||
services.openssh = {
|
||||
enable = true;
|
||||
permitRootLogin = "no";
|
||||
# TODO: Allow root login from certain hosts.
|
||||
# Then dissallow rest.
|
||||
passwordAuthentication = true;
|
||||
settings = {
|
||||
PermitRootLogin = "yes";
|
||||
# TODO: Allow root login from certain hosts.
|
||||
# Then dissallow rest.
|
||||
PasswordAuthentication = true;
|
||||
};
|
||||
};
|
||||
}
|
||||
|
Reference in New Issue
Block a user