helm/profiles/server/default.nix

11 lines
272 B
Nix
Raw Normal View History

2022-09-18 15:13:50 -07:00
{ config, ... }:
{
services.openssh = {
enable = true;
passwordAuthentication = false;
permitRootLogin = "no";
};
networking.firewall.allowedTCPPorts = [ 80 433 22 ]; # ssh and website
security.sudo.wheelNeedsPassword = false; # needed for deploy-rs
}