helm/modules/services/ssh.nix
2020-01-16 18:57:59 -05:00

21 lines
775 B
Nix

{ config, pkgs, ... }:
{
services.openssh = {
enable = true;
forwardX11 = true;
permitRootLogin = "no";
passwordAuthentication = false;
# Allow local LAN to connect with passwords
extraConfig = ''
Match address 192.168.0.0/24
PasswordAuthentication yes
'';
};
users.users.hlissner.openssh.authorizedKeys.keys = [
"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8Tl2pj6CPBV3V72cohPhn+k0a/Na3cOrbmUtFC7rR7icWocSs1S1cSrP3sPLwUqRh3+zfIuLXTrTv3gj8Xvg8WELOspzsiYeAtbcHrnWnx/a7xzYvFyT9/8hkiGM/F6w7IuKEk+AZW34vARSgRPJ1FdH8NbPKJ8ay9zW9XB9YJGnbzIRmsVVpQ8l6Fh8ZqRjZfC1ea7hns8+HgjPrIHFb+S3qZZiwU4Gc8aWJy9ziwwkllEsSchv3aigYA3eOeW0FUQFiKsLGxbX2b2b3d6jFO4Pu+dMSen0h5IzBo0nh7UADSfJPdwbZaMuJzviKe2y6zg6jaM9XRIhLBT6bftDr henrik@lissner.net"
];
}