helm/modules/services/ssh.nix
2020-03-29 01:55:14 -04:00

32 lines
1 KiB
Nix

{ config, pkgs, ... }:
{ config, options, pkgs, lib, ... }:
with lib;
{
options.modules.services.ssh = {
enable = mkOption {
type = types.bool;
default = false;
};
};
config = mkIf config.modules.services.ssh.enable {
services.openssh = {
enable = true;
forwardX11 = true;
permitRootLogin = "no";
passwordAuthentication = false;
# Allow local LAN to connect with passwords
extraConfig = ''
Match address 192.168.0.0/24
PasswordAuthentication yes
'';
};
users.users.hlissner.openssh.authorizedKeys.keys = [
"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8Tl2pj6CPBV3V72cohPhn+k0a/Na3cOrbmUtFC7rR7icWocSs1S1cSrP3sPLwUqRh3+zfIuLXTrTv3gj8Xvg8WELOspzsiYeAtbcHrnWnx/a7xzYvFyT9/8hkiGM/F6w7IuKEk+AZW34vARSgRPJ1FdH8NbPKJ8ay9zW9XB9YJGnbzIRmsVVpQ8l6Fh8ZqRjZfC1ea7hns8+HgjPrIHFb+S3qZZiwU4Gc8aWJy9ziwwkllEsSchv3aigYA3eOeW0FUQFiKsLGxbX2b2b3d6jFO4Pu+dMSen0h5IzBo0nh7UADSfJPdwbZaMuJzviKe2y6zg6jaM9XRIhLBT6bftDr henrik@lissner.net"
];
};
}