osbm/flake
1
0
Fork 0
Code Issues Pull requests Wiki Activity

move out openssh and docker and configure openssh

Browse source
This commit is contained in:
Osman Faruk Bayram 2025-01-13 23:19:39 +03:00
parent d3ddc8df9a
commit 4cc8e1339c
3 changed files with 26 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

4
hosts/tartarus/configuration.nix
View file

@ -70,7 +70,6 @@ in {
# Enable touchpad support (enabled default in most desktopManager). # Enable touchpad support (enabled default in most desktopManager).
# services.xserver.libinput.enable = true; # services.xserver.libinput.enable = true;
virtualisation.docker.enable = true;
# Define a user account. Don't forget to set a password with ‘passwd’. # Define a user account. Don't forget to set a password with ‘passwd’.
users.users.osbm = { users.users.osbm = {
@ -103,9 +102,6 @@ in {
# List services that you want to enable: # List services that you want to enable:
# Enable the OpenSSH daemon.
services.openssh.enable = true;
# Open ports in the firewall. # Open ports in the firewall.
# networking.firewall.allowedTCPPorts = [ ... ]; # networking.firewall.allowedTCPPorts = [ ... ];
# networking.firewall.allowedUDPPorts = [ ... ]; # networking.firewall.allowedUDPPorts = [ ... ];

5
hosts/ymir/configuration.nix
View file

@ -128,8 +128,6 @@ in {
# Enable touchpad support (enabled default in most desktopManager). # Enable touchpad support (enabled default in most desktopManager).
# services.xserver.libinput.enable = true; # services.xserver.libinput.enable = true;
# Define a user account. Don't forget to set a password with ‘passwd’.
virtualisation.docker.enable = true;
users.users = { users.users = {
osbm = { osbm = {
@ -192,8 +190,7 @@ in {
# List services that you want to enable: # List services that you want to enable:
# Enable the OpenSSH daemon.
services.openssh.enable = true;
# Open ports in the firewall. # Open ports in the firewall.
# networking.firewall.allowedTCPPorts = [ ... ]; # networking.firewall.allowedTCPPorts = [ ... ];

25
modules/common-packages.nix
View file

@ -75,4 +75,29 @@
package = pkgs.nix-direnv; package = pkgs.nix-direnv;
}; };
}; };
virtualisation.docker.enable = true;
# Enable the OpenSSH daemon.
services.openssh = {
enable = true;
startWhenNeeded = true;
settings = {
PermitRootLogin = "no";
# only allow key based logins and not password
PasswordAuthentication = false;
KbdInteractiveAuthentication = false;
AuthenticationMethods = "publickey";
PubkeyAuthentication = "yes";
ChallengeResponseAuthentication = "no";
UsePAM = false;
# kick out inactive sessions
ClientAliveCountMax = 5;
ClientAliveInterval = 60;
};
};
} }